stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2021-41277 (severity: HIGH, weakness: CWE-200)
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment variables). URLs were not validated prior to being loaded. This issue is fixed in a new maintenance release (0.40.5 and 1.40.5), and any subsequent release after that. If you’re unable to upgrade immediately, you can mitigate this by including rules in your reverse proxy or load balancer or WAF to provide a validation filter before the application.
CVE-2021-41278 (severity: MEDIUM, weakness: CWE-327)
Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform. In affected versions broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors. The app-functions-sdk exports an “aes” transform that user scripts can optionally call to encrypt data in the processing pipeline. No decrypt function is provided. Encryption is not enabled by default, but if used, the level of protection may be less than the user may expects due to a broken implementation. Version v2.1.0 (EdgeX Foundry Jakarta release and later) of app-functions-sdk-go/v2 deprecates the “aes” transform and provides an improved “aes256” transform in its place. The broken implementation will remain in a deprecated state until it is removed in the next EdgeX major release to avoid breakage of existing software that depends on the broken implementation. As the broken transform is a library function that is not invoked by default, users who do not use the AES transform in their processing pipelines are unaffected. Those that are affected are urged to upgrade to the Jakarta EdgeX release and modify processing pipelines to use the new "aes256" transform.
CVE-2021-41279 (severity: HIGH, weakness: CWE-22)
BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.
CVE-2021-4128 (severity: MEDIUM, weakness: CWE-416)
When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potentially exploitable crash.<br>*This bug only affects Firefox on MacOS. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.
CVE-2021-41280 (severity: CRITICAL, weakness: CWE-78)
Sharetribe Go is a source available marketplace software. In affected versions operating system command injection is possible on installations of Sharetribe Go, that do not have a secret AWS Simple Notification Service (SNS) notification token configured via the `sns_notification_token` configuration parameter. This configuration parameter is unset by default. The vulnerability has been patched in version 10.2.1. Users who are unable to upgrade should set the`sns_notification_token` configuration parameter to a secret value.
CVE-2021-41281 (severity: HIGH, weakness: CWE-22)
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version 1.47.1, Synapse instances with the media repository enabled can be tricked into downloading a file from a remote server into an arbitrary directory. No authentication is required for the affected endpoint. The last 2 directories and file name of the path are chosen randomly by Synapse and cannot be controlled by an attacker, which limits the impact. Homeservers with the media repository disabled are unaffected. Homeservers with a federation whitelist are also unaffected, since Synapse will check the remote hostname, including the trailing `../`s, against the whitelist. Server administrators should upgrade to 1.47.1 or later. Server administrators using a reverse proxy could, at the expense of losing media functionality, may block the certain endpoints as a workaround. Alternatively, non-containerized deployments can be adapted to use the hardened systemd config.
CVE-2021-41282 (severity: HIGH, weakness: CWE-74)
diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection mechanisms against command injection (i.e., the usage of the escapeshellarg function for the arguments) are used, it is still possible to inject sed-specific code and write an arbitrary file in an arbitrary location.
CVE-2021-41285 (severity: HIGH, weakness: NVD-CWE-Other)
Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call (mapping physical memory into a virtual address space). Attackers could exploit this issue to achieve local privilege escalation to NT AUTHORITY\SYSTEM.
CVE-2021-41286 (severity: HIGH, weakness: CWE-287)
Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical account. Consequently, an attacker can attach a debugger to the process or create a patch that manipulates the behavior of the login function. When the function always returns the success value (corresponding to a correct password), an attacker can login with any desired account, such as the administrative account of the application.
CVE-2021-41288 (severity: CRITICAL, weakness: CWE-89)
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.
CVE-2021-41289 (severity: HIGH, weakness: CWE-119)
ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a general user’s permission, local attackers can modify the BIOS by replacing or filling in the content of the designated Memory DataBuffer, which causing a failure of integrity verification and further resulting in a failure to boot.
CVE-2021-4129 (severity: CRITICAL, weakness: CWE-787)
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 95, Firefox ESR < 91.4.0, and Thunderbird < 91.4.0.
CVE-2021-41290 (severity: CRITICAL, weakness: CWE-434)
ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device.
CVE-2021-41291 (severity: HIGH, weakness: CWE-22)
ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device.
CVE-2021-41292 (severity: CRITICAL, weakness: CWE-288)
ECOA BAS controller suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can remotely bypass authentication and disclose sensitive information and circumvent physical access controls in smart homes and buildings and manipulate HVAC.
CVE-2021-41293 (severity: HIGH, weakness: CWE-22)
ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific POST parameter, unauthenticated attackers can remotely disclose arbitrary files on the affected device and disclose sensitive and system information.
CVE-2021-41294 (severity: CRITICAL, weakness: CWE-22)
ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET parameter, unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario.
CVE-2021-41295 (severity: HIGH, weakness: CWE-352)
ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands (GET, POST, PUT, DELETE) to perform arbitrary operations in the system.
CVE-2021-41296 (severity: CRITICAL, weakness: CWE-521)
ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system.
CVE-2021-41297 (severity: HIGH, weakness: CWE-522)
ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text.
CVE-2021-41298 (severity: HIGH, weakness: CWE-284)
ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability, attackers with general user's privilege can remotely bypass authorization and access the hidden resources in the system and execute privileged functionalities.
CVE-2021-41299 (severity: CRITICAL, weakness: CWE-798)
ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers can obtain administrator’s privilege without logging in.
CVE-2021-4130 (severity: MEDIUM, weakness: CWE-352)
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-41300 (severity: CRITICAL, weakness: CWE-522)
ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality.
CVE-2021-41301 (severity: CRITICAL, weakness: CWE-200)
ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will enable the unauthenticated attacker to remotely disclose sensitive information and help her in authentication bypass, privilege escalation and full system access.
CVE-2021-41302 (severity: HIGH, weakness: CWE-311)
ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege.
CVE-2021-41303 (severity: CRITICAL, weakness: CWE-287)
Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.
CVE-2021-41304 (severity: MEDIUM, weakness: CWE-79)
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. The affected versions are before version 8.13.12, and from version 8.14.0 before 8.20.2.
CVE-2021-41305 (severity: HIGH, weakness: CWE-639)
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private projects and filters via an Insecure Direct Object References (IDOR) vulnerability in the Average Number of Times in Status Gadget. The affected versions are before version 8.13.12..
CVE-2021-41306 (severity: HIGH, weakness: CWE-639)
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References (IDOR) vulnerability in the Average Time in Status Gadget. The affected versions are before version 8.13.12, and from version 8.14.0 before 8.20.0.
CVE-2021-41307 (severity: HIGH, weakness: CWE-639)
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct Object References (IDOR) vulnerability in the Workload Pie Chart Gadget. The affected versions are before version 8.13.12, and from version 8.14.0 before 8.20.0.
CVE-2021-41308 (severity: MEDIUM, weakness: CWE-285)
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the `ReplicationSettings!default.jspa` endpoint. The affected versions are before version 8.6.0, from version 8.7.0 before 8.13.12, and from version 8.14.0 before 8.20.1.
CVE-2021-41309 (severity: MEDIUM, weakness: CWE-287)
Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of another user's Jira Service Management project via a Broken Authentication vulnerability in the /plugins/servlet/audit/resource endpoint. The affected versions of Jira Server and Data Center are before version 8.19.1.
CVE-2021-4131 (severity: MEDIUM, weakness: CWE-352)
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-41310 (severity: MEDIUM, weakness: CWE-79)
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Associated Projects feature (/secure/admin/AssociatedProjectsForCustomField.jspa). The affected versions are before version 8.5.19, from version 8.6.0 before 8.13.11, and from version 8.14.0 before 8.19.1.
CVE-2021-41311 (severity: HIGH, weakness: CWE-287)
Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings, via a Broken Authentication vulnerability in the /plugins/servlet/project-config/PROJECT/roles endpoint. The affected versions are before version 8.19.1.
CVE-2021-41312 (severity: HIGH, weakness: CWE-287)
Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue Collectors on Jira Service Management projects via an Improper Authentication vulnerability in the /secure/ViewCollectors endpoint. The affected versions are before version 8.19.1.
CVE-2021-41313 (severity: MEDIUM, weakness: CWE-285)
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20.7.
CVE-2021-41314 (severity: HIGH, weakness: CWE-74)
Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to create (or overwrite) a file with specific content (e.g., the "2" string). This leads to admin session crafting and therefore gaining full web UI admin privileges by an unauthenticated attacker. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
CVE-2021-41315 (severity: HIGH, weakness: CWE-78)
The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker (with access to the console application) to execute arbitrary OS commands and escalate privileges.
CVE-2021-41316 (severity: HIGH, weakness: CWE-88)
The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can inject an extra argument to overwrite arbitrary files as the root user on the Remote Collector.
CVE-2021-41317 (severity: CRITICAL, weakness: CWE-287)
XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths.
CVE-2021-41318 (severity: MEDIUM, weakness: CWE-79)
In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.
CVE-2021-4132 (severity: HIGH, weakness: CWE-79)
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41320 (severity: MEDIUM, weakness: CWE-798)
A technical user has hardcoded credentials in Wallstreet Suite TRM 7.4.83 (64-bit edition) with higher privilege than the average authenticated user. NOTE: the vendor disputes this because the password is not hardcoded (it can be changed during installation or at any later time).
CVE-2021-41322 (severity: HIGH, weakness: NVD-CWE-Other)
Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.
CVE-2021-41323 (severity: MEDIUM, weakness: CWE-22)
Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells files belonging to any user, via the format parameter.
CVE-2021-41324 (severity: MEDIUM, weakness: CWE-22)
Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerate personal files (or Cells files belonging to any user) via the nodes parameter (for Copy and Move) or via the Path parameter (for Delete).
CVE-2021-41325 (severity: MEDIUM, weakness: NVD-CWE-Other)
Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile parameter. (In addition, such users can be granted several admin permissions via the Roles parameter.)
CVE-2021-41326 (severity: CRITICAL, weakness: NVD-CWE-Other)
In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call.
CVE-2021-41329 (severity: MEDIUM, weakness: CWE-682)
Datalust Seq before 2021.2.6259 allows users (with view filters applied to their accounts) to see query results not constrained by their view filter. This information exposure, caused by an internal cache key collision, occurs when the user's view filter includes an array or IN clause, and when another user has recently executed an identical query differing only by the array elements.
CVE-2021-4133 (severity: HIGH, weakness: CWE-863)
A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled.
CVE-2021-41330 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-41331 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Media Audio Decoder Remote Code Execution Vulnerability
CVE-2021-41332 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Print Spooler Information Disclosure Vulnerability
CVE-2021-41333 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-41334 (severity: HIGH, weakness: CWE-269)
Windows Desktop Bridge Elevation of Privilege Vulnerability
CVE-2021-41335 (severity: HIGH, weakness: CWE-269)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-41336 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Kernel Information Disclosure Vulnerability
CVE-2021-41337 (severity: MEDIUM, weakness: NVD-CWE-Other)
Active Directory Security Feature Bypass Vulnerability
CVE-2021-41338 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
CVE-2021-41339 (severity: HIGH, weakness: CWE-269)
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-4134 (severity: MEDIUM, weakness: CWE-89)
The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the ID parameter found in the ~/inc/api/class-view.php file which allows attackers with administrative level permissions to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 4.7.4.
CVE-2021-41340 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2021-41342 (severity: HIGH, weakness: NVD-CWE-Other)
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-41343 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Fast FAT File System Driver Information Disclosure Vulnerability
CVE-2021-41344 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-41345 (severity: HIGH, weakness: CWE-269)
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-41346 (severity: HIGH, weakness: NVD-CWE-Other)
Console Window Host Security Feature Bypass Vulnerability
CVE-2021-41347 (severity: HIGH, weakness: CWE-269)
Windows AppX Deployment Service Elevation of Privilege Vulnerability
CVE-2021-41348 (severity: HIGH, weakness: CWE-269)
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-41349 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-4135 (severity: MEDIUM, weakness: CWE-200)
A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. A local user could use this flaw to get unauthorized access to some data.
CVE-2021-41350 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-41351 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chrome based) Spoofing on IE Mode
CVE-2021-41352 (severity: HIGH, weakness: NVD-CWE-Other)
SCOM Information Disclosure Vulnerability
CVE-2021-41353 (severity: LOW, weakness: NVD-CWE-Other)
Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
CVE-2021-41354 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2021-41355 (severity: MEDIUM, weakness: NVD-CWE-Other)
.NET Core and Visual Studio Information Disclosure Vulnerability
CVE-2021-41356 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Denial of Service Vulnerability
CVE-2021-41357 (severity: HIGH, weakness: NVD-CWE-Other)
Win32k Elevation of Privilege Vulnerability
CVE-2021-4136 (severity: HIGH, weakness: CWE-122)
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-41360 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-41361 (severity: LOW, weakness: NVD-CWE-Other)
Active Directory Federation Server Spoofing Vulnerability
CVE-2021-41363 (severity: MEDIUM, weakness: NVD-CWE-Other)
Intune Management Extension Security Feature Bypass Vulnerability
CVE-2021-41365 (severity: HIGH, weakness: CWE-89)
Microsoft Defender for IoT Remote Code Execution Vulnerability