stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2021-28321 (severity: HIGH, weakness: CWE-59)
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-28322 (severity: HIGH, weakness: CWE-269)
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
CVE-2021-28323 (severity: MEDIUM, weakness: CWE-178)
Windows DNS Information Disclosure Vulnerability
CVE-2021-28324 (severity: HIGH, weakness: NVD-CWE-Other)
Windows SMB Information Disclosure Vulnerability
CVE-2021-28325 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows SMB Information Disclosure Vulnerability
CVE-2021-28326 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows AppX Deployment Server Denial of Service Vulnerability
CVE-2021-28327 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28328 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows DNS Information Disclosure Vulnerability
CVE-2021-28329 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28330 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28331 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28332 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28333 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28334 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28335 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28336 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28337 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28338 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28339 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28340 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28341 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28342 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28343 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28344 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28345 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28346 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28347 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2021-28348 (severity: HIGH, weakness: NVD-CWE-Other)
Windows GDI+ Remote Code Execution Vulnerability
CVE-2021-28349 (severity: HIGH, weakness: NVD-CWE-Other)
Windows GDI+ Remote Code Execution Vulnerability
CVE-2021-28350 (severity: HIGH, weakness: NVD-CWE-Other)
Windows GDI+ Remote Code Execution Vulnerability
CVE-2021-28351 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2021-28352 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28353 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28354 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28355 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28356 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28357 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28358 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28359 (severity: MEDIUM, weakness: CWE-79)
The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fix the issue completely. Update to Airflow 1.10.15 or 2.0.2. Please also update your Python version to the latest available PATCH releases of the installed MINOR versions, example update to Python 3.6.13 if you are on Python 3.6. (Those contain the fix for CVE-2021-23336 https://nvd.nist.gov/vuln/detail/CVE-2021-23336).
CVE-2021-28361 (severity: HIGH, weakness: CWE-476)
An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.
CVE-2021-28362 (severity: HIGH, weakness: CWE-191)
An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked (with respect to the available data) at this stage, and these variables are susceptible to integer underflow, it is possible to construct an invalid extension header that will cause memory corruption issues and lead to a Denial-of-Service condition. This is related to rpl-ext-header.c.
CVE-2021-28363 (severity: MEDIUM, weakness: CWE-295)
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.
CVE-2021-28372 (severity: HIGH, weakness: CWE-290)
ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the victim TUTK device.
CVE-2021-28373 (severity: HIGH, weakness: CWE-863)
The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch for a short time. However, all end users are explicitly directed to use the git master branch in production. Semantic version numbers such as 21.03 appear to exist, but are automatically generated from the year and month. They are not releases.
CVE-2021-28374 (severity: HIGH, weakness: CWE-732)
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).
CVE-2021-28375 (severity: HIGH, weakness: CWE-862)
An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.
CVE-2021-28376 (severity: LOW, weakness: CWE-22)
ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.
CVE-2021-28377 (severity: MEDIUM, weakness: CWE-22)
ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.
CVE-2021-28378 (severity: MEDIUM, weakness: CWE-79)
Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
CVE-2021-28379 (severity: HIGH, weakness: CWE-434)
web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.
CVE-2021-28380 (severity: MEDIUM, weakness: CWE-79)
The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.
CVE-2021-28381 (severity: CRITICAL, weakness: CWE-89)
The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.
CVE-2021-28382 (severity: MEDIUM, weakness: CWE-79)
Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.
CVE-2021-28398 (severity: HIGH, weakness: CWE-78)
A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure. A User Administrator or Administrator account is required to perform this. This occurs in the runBeforeScript method in harvesters/src/main/java/org/fao/geonet/kernel/harvest/harvester/localfilesystem/LocalFilesystemHarvester.java. The earliest affected version is 3.4.0.
CVE-2021-28399 (severity: MEDIUM, weakness: NVD-CWE-Other)
OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function.
CVE-2021-28411 (severity: CRITICAL, weakness: CWE-269)
An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges.
CVE-2021-28417 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter.
CVE-2021-28418 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.
CVE-2021-28419 (severity: HIGH, weakness: CWE-89)
The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.
CVE-2021-28420 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter.
CVE-2021-28423 (severity: HIGH, weakness: CWE-89)
Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php.
CVE-2021-28424 (severity: MEDIUM, weakness: CWE-79)
A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated users to inject arbitrary web script or HTML via the 'email' POST parameter in adminprofile.php.
CVE-2021-28427 (severity: HIGH, weakness: CWE-120)
Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
CVE-2021-28428 (severity: CRITICAL, weakness: CWE-434)
File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functionality. The original file upload vulnerability (CVE-2020-27387) was remediated by restricting the PHP extensions; however, we confirmed that the filter was bypassed via uploading an arbitrary .htaccess and *.hello files in order to execute PHP code to gain RCE.
CVE-2021-28429 (severity: MEDIUM, weakness: CWE-190)
Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.
CVE-2021-28434 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28435 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Event Tracing Information Disclosure Vulnerability
CVE-2021-28436 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2021-28437 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Installer Information Disclosure Vulnerability
CVE-2021-28438 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Console Driver Denial of Service Vulnerability
CVE-2021-28439 (severity: HIGH, weakness: NVD-CWE-Other)
Windows TCP/IP Driver Denial of Service Vulnerability
CVE-2021-28440 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-28441 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Hyper-V Information Disclosure Vulnerability
CVE-2021-28442 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows TCP/IP Information Disclosure Vulnerability
CVE-2021-28443 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Console Driver Denial of Service Vulnerability
CVE-2021-28444 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2021-28445 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Network File System Remote Code Execution Vulnerability
CVE-2021-28446 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Portmapping Information Disclosure Vulnerability
CVE-2021-28447 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
CVE-2021-28448 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability
CVE-2021-28449 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-28450 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Denial of Service Vulnerability
CVE-2021-28451 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-28452 (severity: HIGH, weakness: CWE-787)
Microsoft Outlook Memory Corruption Vulnerability
CVE-2021-28453 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-28454 (severity: HIGH, weakness: CWE-416)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-28455 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
CVE-2021-28456 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Excel Information Disclosure Vulnerability
CVE-2021-28457 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28458 (severity: HIGH, weakness: NVD-CWE-Other)
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
CVE-2021-28459 (severity: MEDIUM, weakness: CWE-79)
Azure DevOps Server Spoofing Vulnerability
CVE-2021-28460 (severity: HIGH, weakness: NVD-CWE-Other)
Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-28461 (severity: MEDIUM, weakness: CWE-79)
Dynamics Finance and Operations Cross-site Scripting Vulnerability
CVE-2021-28464 (severity: HIGH, weakness: NVD-CWE-Other)
VP9 Video Extensions Remote Code Execution Vulnerability
CVE-2021-28465 (severity: HIGH, weakness: CWE-787)
Web Media Extensions Remote Code Execution Vulnerability
CVE-2021-28466 (severity: HIGH, weakness: NVD-CWE-Other)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2021-28468 (severity: HIGH, weakness: CWE-843)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2021-28469 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28470 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
CVE-2021-28471 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28472 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability
CVE-2021-28473 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28474 (severity: HIGH, weakness: CWE-436)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-28475 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28476 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-28477 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2021-28478 (severity: HIGH, weakness: CWE-290)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-28479 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows CSC Service Information Disclosure Vulnerability
CVE-2021-28480 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28481 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28482 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28483 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28484 (severity: HIGH, weakness: CWE-835)
An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not validate the length of the request, which can lead to a state where yubihsm-connector becomes stuck in a loop waiting for the YubiHSM to send it data, preventing any further operations until the yubihsm-connector is restarted. An attacker can send 0, 1, or 2 bytes to trigger this.
CVE-2021-28485 (severity: MEDIUM, weakness: CWE-22)
In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application.
CVE-2021-28488 (severity: MEDIUM, weakness: CWE-668)
Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already granted a highly privileged role). Users in the same AMOS authorization group can retrieve managed-network data that was not set to be accessible to the entire group (i.e., was only set to be accessible to a subset of that group).
CVE-2021-28490 (severity: HIGH, weakness: CWE-352)
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.
CVE-2021-28492 (severity: MEDIUM, weakness: NVD-CWE-Other)
Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format.
CVE-2021-28493 (severity: HIGH, weakness: CWE-287)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.32.0 and prior releases
CVE-2021-28494 (severity: HIGH, weakness: CWE-287)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases
CVE-2021-28495 (severity: CRITICAL, weakness: CWE-287)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train
CVE-2021-28496 (severity: MEDIUM, weakness: CWE-311)
On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the device. The affected EOS Versions are: all releases in 4.22.x train, 4.23.9 and below releases in the 4.23.x train, 4.24.7 and below releases in the 4.24.x train, 4.25.4 and below releases in the 4.25.x train, 4.26.1 and below releases in the 4.26.x train
CVE-2021-28497 (severity: HIGH, weakness: CWE-264)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train
CVE-2021-28498 (severity: HIGH, weakness: CWE-255)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and prior releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train
CVE-2021-28499 (severity: MEDIUM, weakness: CWE-255)
In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train
CVE-2021-28500 (severity: HIGH, weakness: CWE-285)
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
CVE-2021-28501 (severity: HIGH, weakness: CWE-285)
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
CVE-2021-28503 (severity: CRITICAL, weakness: CWE-305)
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
CVE-2021-28504 (severity: HIGH, weakness: CWE-284)
On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected.
CVE-2021-28505 (severity: HIGH, weakness: CWE-284)
On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.