rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-39248 
Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T20:33:55.000Z
CVE-2021-39249 
Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become predictable through a brute-force attack against the PHP mt_rand function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T22:02:27.000Z
CVE-2021-39250 
Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution, because an uploaded file can be placed in an IFRAME element within user-generated content. For code execution, the attacker can rely on the ability of an admin to install widgets, disclosure of the admin session ID in a Referer header, and the ability of an admin to use the templating engine (e.g., Edit HTML).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T22:02:12.000Z
CVE-2021-39251 
A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39252 
A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39253 
A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39254 
A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39255 
A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39256 
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39257 
A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs_attr_pwrite), causing stack consumption in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39258 
A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39259 
A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_lookup_by_name, in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39260 
A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39261 
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39262 
A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39263 
A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_value, in NTFS-3G < 2021.8.22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T00:00:00.000Z
CVE-2021-39267 
Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introduce arbitrary JavaScript via a Content-Type Filter bypass to upload malicious files. This occurs because text/html is blocked, but other types that allow JavaScript execution (such as text/xml) are not blocked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T00:30:16.000Z
CVE-2021-39268 
Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introduce arbitrary JavaScript via malicious SVG files. This occurs because the clean_file_output protection mechanism can be bypassed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T00:29:21.000Z
CVE-2021-39270 
In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur.
Problem types: description: Incorrect Access Control
Affected products: vendor: Ping Identity
product: RSA SecurID Integration Kit
vendor: Ping Identity
product: RSA SecurID Integration Kit
vendor: Ping Identity
product: RSA SecurID Integration Kit
vendor: Ping Identity
product: RSA SecurID Integration Kit
Credits: lang: en
value: Ping Identity credits Lockheed Martin Corporation for their responsible disclosure.
Published: 2021-08-18T18:49:35.000Z
CVE-2021-39271 
OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during archive extraction via attacker-supplied Python code in the class attribute of a .bscw file. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T04:58:25.000Z
CVE-2021-39272 
Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T05:05:26.000Z
CVE-2021-39273 
In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T11:59:39.000Z
CVE-2021-39274 
In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing an unprivileged user to modify the main application and the application configuration file. This results in arbitrary code execution with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T11:59:08.000Z
CVE-2021-39275 ap_escape_quotes buffer overflow
ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.
Problem types: description: Buffer Overflow
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: ClusterFuzz
Published: 2021-09-16T14:40:22.000Z
CVE-2021-39278 
Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3, and WDR-3124A-US-T 2.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T05:39:13.000Z
CVE-2021-39279 
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3, and WDR-3124A-US-T 2.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T05:40:14.000Z
CVE-2021-39280 
Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-06T20:47:37.000Z
CVE-2021-39282 
Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T16:59:05.000Z
CVE-2021-39283 
liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T16:58:53.000Z
CVE-2021-39285 
A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web interface URL to create a XSS based attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T12:40:37.000Z
CVE-2021-39286 
Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T17:31:34.000Z
CVE-2021-39289 
Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T04:33:03.000Z
CVE-2021-39290 
Certain NetModule devices allow Limited Session Fixation via PHPSESSID. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T04:35:45.000Z
CVE-2021-39291 
Certain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T04:37:50.000Z
CVE-2021-39293 
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T00:00:00.000Z
CVE-2021-39295 
In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-15T00:00:00.000Z
CVE-2021-39296 
In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T00:00:00.000Z
CVE-2021-39297 
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Problem types: description: Arbitrary Code Execution; Escalation of Privilege
Affected products: vendor: n/a
product: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
Published: 2022-02-16T16:38:11.000Z
CVE-2021-39298 
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
Problem types: description: n/a
Affected products: vendor: AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
vendor: AMD
product: Ryzen 2000 Series
default_status: unaffected
vendor: AMD
product: Ryzen 3000 Series
default_status: unaffected
vendor: AMD
product: Ryzen 5000 Series
default_status: unaffected
Published: 2022-02-16T16:38:10.726Z
CVE-2021-39299 
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Problem types: description: Arbitrary Code Execution; Escalation of Privilege
Affected products: vendor: n/a
product: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
Published: 2022-02-16T16:38:13.000Z
CVE-2021-39300 
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Problem types: description: Arbitrary Code Execution; Escalation of Privilege
Affected products: vendor: n/a
product: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
Published: 2022-02-16T16:38:13.000Z
CVE-2021-39301 
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
Problem types: description: Arbitrary Code Execution; Escalation of Privilege
Affected products: vendor: n/a
product: BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOS
Published: 2022-02-16T16:38:12.000Z
CVE-2021-39302 
MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T16:25:54.000Z
CVE-2021-39303 
The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-12T20:36:59.000Z
CVE-2021-39304 
Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-13T14:34:54.000Z
CVE-2021-39306 
A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication challenge text in WEP security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T18:08:42.000Z
CVE-2021-39307 
PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T12:47:05.000Z
CVE-2021-39308 WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting
The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the ~/processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: WooCommerce myghpay Payment Gateway
product: WooCommerce myghpay Payment Gateway
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: p7e4
Published: 2021-12-14T15:50:16.276Z
CVE-2021-39309 Parsian Bank Gateway for Woocommerce <= 1.0 Reflected Cross-Site Scripting
The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parameter due to a var_dump() on $_POST variables found in the ~/vendor/dpsoft/parsian-payment/sample/rollback-payment.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Parsian Bank Gateway for Woocommerce
product: Parsian Bank Gateway for Woocommerce
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: p7e4
Published: 2021-12-14T15:50:13.186Z
CVE-2021-39310 Real WYSIWYG <= 0.0.2 Reflected Cross-Site Scripting
The Real WYSIWYG WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of PHP_SELF in the ~/real-wysiwyg.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.2.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Real WYSIWYG
product: Real WYSIWYG
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: p7e4
Published: 2021-12-14T15:50:17.778Z
CVE-2021-39311 link-list-manager <= 1.0 Reflected Cross-Site Scripting
The link-list-manager WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the category parameter found in the ~/llm.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: link-list-manager
product: link-list-manager
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: p7e4
Published: 2021-12-14T15:50:13.961Z
CVE-2021-39312 True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read
The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: True Ranker
product: True Ranker
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: p7e4
Published: 2021-12-14T15:50:17.051Z
CVE-2021-39313 Simple Image Gallery <= 1.0.6 Reflected Cross-Site Scripting
The Simple Image Gallery WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the ~/simple-image-gallery.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.6.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Simple Image Gallery
product: Simple Image Gallery
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: p7e4
Published: 2021-12-14T15:50:18.570Z
CVE-2021-39314 WooCommerce EnvioPack <= 1.2 Reflected Cross-Site Scripting
The WooCommerce EnvioPack WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the dataid parameter found in the ~/includes/functions.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: WooCommerce EnvioPack
product: WooCommerce EnvioPack
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: p7e4
Published: 2021-12-14T15:50:12.404Z
CVE-2021-39315 Magic Post Voice <= 1.2 Reflected Cross-Site Scripting
The Magic Post Voice WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the ids parameter found in the ~/inc/admin/main.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Magic Post Voice
product: Magic Post Voice
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: p7e4
Published: 2021-12-14T15:50:08.501Z
CVE-2021-39316 ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure
The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
cwe_id: CWE-552
description: CWE-552 Files or Directories Accessible to External Parties
Affected products: vendor: ZoomIt
product: ZoomSounds - WordPress Wave Audio Player with Playlist
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: DigitalJessica Ltd
Published: 2021-08-31T11:05:58.222Z