yahoo-inc/cve-impacts huggingface dataset:
CVE-2021-28184: The Active Directory configuration function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, leakage, abnormally terminate
CVE-2021-28185: The specific function in ASUS BMCs firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28186: The specific function in ASUS BMCs firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28187: The specific function in ASUS BMCs firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28188: The specific function in ASUS BMCs firmware Web management page (Modify users information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28189: The SMTP configuration function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28190: The specific function in ASUS BMCs firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28191: The Firmware update function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28192: The specific function in ASUS BMCs firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28193: The SMTP configuration function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28194: The specific function in ASUS BMCs firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28195: The Radius configuration function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28196: The specific function in ASUS BMCs firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28197: The Active Directory configuration function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, leakage, abnormally terminate
CVE-2021-28198: The Firmware protocol configuration function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28199: The specific function in ASUS BMCs firmware Web management page (Modify users information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28200: The CD media configuration function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, leakage, abnormally terminate
CVE-2021-28201: The Service configuration-1 function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28202: The Service configuration-2 function in ASUS BMCs firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Key phrases: buffer overflow, abnormally terminate
CVE-2021-28203: The Web Set Media Image function in ASUS BMCs firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Key phrases: command injection, execute commands
CVE-2021-28204: The specific function in ASUS BMCs firmware Web management page (Modify users information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.
Key phrases: command injection, execute commands
CVE-2021-28205: The specific function in ASUS BMCs firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Key phrases: path traversal
CVE-2021-28206: The specific function in ASUS BMCs firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Key phrases: path traversal
CVE-2021-28207: The specific function in ASUS BMCs firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Key phrases: path traversal
CVE-2021-28208: The specific function in ASUS BMCs firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Key phrases: path traversal
CVE-2021-28209: The specific function in ASUS BMCs firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Key phrases: path traversal
CVE-2021-28210: An unlimited recursion in DxeCore in EDK II.
Key phrases: unlimited recursion
CVE-2021-28211: A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
Key phrases: heap overflow
CVE-2021-28213: Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.
CVE-2021-28216: BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.
CVE-2021-28233: Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in ok_jpg.c.
Key phrases: heap-based buffer overflow
CVE-2021-28235: Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.
Key phrases: escalate privileges via the debug function, authentication
CVE-2021-28236: LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.
Key phrases: null pointer dereference
CVE-2021-28237: LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
Key phrases: heap-buffer overflow, heap buffer overflow
CVE-2021-28242: SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cf_name" parameter when creating a new filter under the "Collections" tab.
Key phrases: obtain sensitive database, obtain sensitive database information by injecting SQL commands, sql injection
CVE-2021-28245: PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account.
Key phrases: sql injection, sensitive information
CVE-2021-28246: CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be executed as the ehealth user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: privilege escalation
CVE-2021-28247: CA eHealth Performance Manager through 6.3.2.12 is affected by Cross Site Scripting (XSS). The impact is: An authenticated remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and perform a Reflected Cross-Site Scripting attack against the platform users. The affected endpoints are: cgi/nhWeb with the parameter report, aviewbin/filtermibobjects.pl with the parameter namefilter, and aviewbin/query.pl with the parameters System, SystemText, Group, and GroupText. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: inject arbitrary web script or HTML, cross site scripting (xss), reflected cross-site scripting
CVE-2021-28248: CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authentication Attempts. An attacker is able to perform an arbitrary number of /web/frames/ authentication attempts using different passwords, and eventually gain access to a targeted account, NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: gain access, improper restriction of excessive authentication attempts
CVE-2021-28249: CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the FtpCollector executable is run. The code in the library will be executed as the root user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: privilege escalation
CVE-2021-28250: CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file. When a component is run as an argument of the runpicEhealth executable, the script code will be executed as the ehealth user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: privilege escalation
CVE-2021-28254: A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.
Key phrases: execute arbitrary commands, deserialization
CVE-2021-28269: Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions.
Key phrases: insecure permissions
CVE-2021-28271: Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group.
Key phrases: elevation of privileges, elevation privilege, improper permissions
CVE-2021-28275: A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
Key phrases: denial of service, segmentation fault
CVE-2021-28276: A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.
Key phrases: denial of service
CVE-2021-28277: A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c.
Key phrases: buffer overflow
CVE-2021-28278: A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.
Key phrases: heap-based buffer overflow
CVE-2021-28280: CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML
Key phrases: inject arbitrary web script or HTML, csrf, cross-site scripting (xss)
CVE-2021-28290: A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter.
Key phrases: cross-site scripting (xss)
CVE-2021-28293: Seceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover vulnerability in the Forgot Password feature. The lack of correct configuration leads to recovery of the password reset link generated via the password reset functionality, and thus an unauthenticated attacker can set an arbitrary password for any user.
Key phrases: unauthenticated account takeover
CVE-2021-28294: Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).
Key phrases: arbitrary file upload, remote code execution (rce)
CVE-2021-28295: Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.
Key phrases: unauthenticated sql injection, database information disclosure
CVE-2021-28300: NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.
Key phrases: execute arbitrary code, execute arbitrary code or cause a Denial-, null pointer dereference, denial-of-service (dos)
CVE-2021-28302: A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.
Key phrases: stack overflow, denial of service, crash
CVE-2021-28305: An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.
Key phrases: use-after-free, use after free
CVE-2021-28306: An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.
Key phrases: null pointer dereference
CVE-2021-28307: An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon.
Key phrases: null pointer dereference
CVE-2021-28308: An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.
Key phrases: out-of bounds read, out of bounds read
CVE-2021-28309: Windows Kernel Information Disclosure Vulnerability
Key phrases: windows kernel information disclosure
CVE-2021-28310: Win32k Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-28311: Windows Application Compatibility Cache Denial of Service Vulnerability
Key phrases: windows application compatibility cache denial of service
CVE-2021-28312: Windows NTFS Denial of Service Vulnerability
Key phrases: denial of service
CVE-2021-28313: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-28314: Windows Hyper-V Elevation of Privilege Vulnerability
Key phrases: windows hyper-v elevation of privilege
CVE-2021-28315: Windows Media Video Decoder Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28316: Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows wlan autoconfig service security feature bypass
CVE-2021-28317: Microsoft Windows Codecs Library Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-28318: Windows GDI+ Information Disclosure Vulnerability
Key phrases: windows gdi+ information disclosure
CVE-2021-28319: Windows TCP/IP Driver Denial of Service Vulnerability
Key phrases: windows tcp ip driver denial of service
CVE-2021-28320: Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-28321: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-28322: Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-28323: Windows DNS Information Disclosure Vulnerability
Key phrases: windows dns information disclosure
CVE-2021-28324: Windows SMB Information Disclosure Vulnerability
Key phrases: windows smb information disclosure
CVE-2021-28325: Windows SMB Information Disclosure Vulnerability
Key phrases: windows smb information disclosure
CVE-2021-28326: Windows AppX Deployment Server Denial of Service Vulnerability
Key phrases: windows appx deployment server denial of service
CVE-2021-28327: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28328: Windows DNS Information Disclosure Vulnerability
Key phrases: windows dns information disclosure
CVE-2021-28329: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28330: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28331: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28332: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28333: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28334: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28335: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28336: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28337: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28338: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28339: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28340: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28341: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28342: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28343: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28344: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28345: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28346: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28347: Windows Speech Runtime Elevation of Privilege Vulnerability
Key phrases: windows speech runtime elevation of privilege
CVE-2021-28348: Windows GDI+ Remote Code Execution Vulnerability
Key phrases: windows gdi+ remote code execution
CVE-2021-28349: Windows GDI+ Remote Code Execution Vulnerability
Key phrases: windows gdi+ remote code execution
CVE-2021-28350: Windows GDI+ Remote Code Execution Vulnerability
Key phrases: windows gdi+ remote code execution
CVE-2021-28351: Windows Speech Runtime Elevation of Privilege Vulnerability
Key phrases: windows speech runtime elevation of privilege
CVE-2021-28352: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28353: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28354: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28355: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28356: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28357: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28358: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28359: The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fix the issue completely. Update to Airflow 1.10.15 or 2.0.2. Please also update your Python version to the latest available PATCH releases of the installed MINOR versions, example update to Python 3.6.13 if you are on Python 3.6. (Those contain the fix for CVE-2021-23336 https://nvd.nist.gov/vuln/detail/CVE-2021-23336).
Key phrases: xss exploit
CVE-2021-28361: An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.
Key phrases: null pointer dereference, crash
CVE-2021-28362: An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked (with respect to the available data) at this stage, and these variables are susceptible to integer underflow, it is possible to construct an invalid extension header that will cause memory corruption issues and lead to a Denial-of-Service condition. This is related to rpl-ext-header.c.
Key phrases: integer underflow, memory corruption issues, denial-of-service condition
CVE-2021-28363: The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.
CVE-2021-28372: ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the victim TUTK device.
Key phrases: impersonate an arbitrary ThroughTek (TUTK) device, hijack
CVE-2021-28373: The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch for a short time. However, all end users are explicitly directed to use the git master branch in production. Semantic version numbers such as 21.03 appear to exist, but are automatically generated from the year and month. They are not releases.
Key phrases: log in via the OTP code without a
CVE-2021-28374: The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).
Key phrases: read user information, weak permissions, cleartext password
CVE-2021-28375: An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.
CVE-2021-28376: ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.
Key phrases: read arbitrary files, fname directory traversal
CVE-2021-28377: ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.
Key phrases: read arbitrary files, directory traversal
CVE-2021-28378: Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
Key phrases: XSS via certain issue data in some situations, xss
CVE-2021-28379: web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.
Key phrases: uploads from a different origin
CVE-2021-28380: The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.
Key phrases: XSS via a backend user account, xss
CVE-2021-28381: The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.
Key phrases: SQL injection via isLanguageViewHelper, sql injection
CVE-2021-28382: Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.
Key phrases: Stored XSS on the user-management page, stored xss
CVE-2021-28398: A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure. A User Administrator or Administrator account is required to perform this. This occurs in the runBeforeScript method in harvesters/src/main/java/org/fao/geonet/kernel/harvest/harvester/localfilesystem/LocalFilesystemHarvester.java. The earliest affected version is 3.4.0.
Key phrases: execute arbitrary OS, directory harvester before-script, arbitrary os command
CVE-2021-28399: OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function.
Key phrases: enumerate the valid username and email address via, forgot password function
CVE-2021-28411: An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges.
Key phrases: escalate privileges
CVE-2021-28417: A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter.
Key phrases: inject JavaScript via archive.php and the "search_name, cross-site scripting (xss)
CVE-2021-28418: A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.
Key phrases: inject JavaScript via settings.php and the "category, cross-site scripting (xss)
CVE-2021-28419: The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.
Key phrases: time-based blind sql injection, ability to retrieve all databases
CVE-2021-28420: A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter.
Key phrases: inject JavaScript via alerts.php and the "from_time, cross-site scripting (xss)
CVE-2021-28423: Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the 'editid, sql injection, arbitrary sql commands
CVE-2021-28424: A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated users to inject arbitrary web script or HTML via the 'email' POST parameter in adminprofile.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, stored cross-site scripting (xss)
CVE-2021-28427: Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
Key phrases: execute arbitrary code, execute arbitrary code via crafted TIFF file, buffer overflow
CVE-2021-28428: File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functionality. The original file upload vulnerability (CVE-2020-27387) was remediated by restricting the PHP extensions; however, we confirmed that the filter was bypassed via uploading an arbitrary .htaccess and *.hello files in order to execute PHP code to gain RCE.
Key phrases: gain RCE., file upload, rce
CVE-2021-28429: Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), integer overflow, denial of service (dos)
CVE-2021-28434: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28435: Windows Event Tracing Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-28436: Windows Speech Runtime Elevation of Privilege Vulnerability
Key phrases: windows speech runtime elevation of privilege
CVE-2021-28437: Windows Installer Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-28438: Windows Console Driver Denial of Service Vulnerability
Key phrases: denial of service
CVE-2021-28439: Windows TCP/IP Driver Denial of Service Vulnerability
Key phrases: windows tcp ip driver denial of service
CVE-2021-28440: Windows Installer Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-28441: Windows Hyper-V Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-28442: Windows TCP/IP Information Disclosure Vulnerability
Key phrases: windows tcp ip information disclosure
CVE-2021-28443: Windows Console Driver Denial of Service Vulnerability
Key phrases: denial of service
CVE-2021-28444: Windows Hyper-V Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows hyper-v security feature bypass
CVE-2021-28445: Windows Network File System Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28446: Windows Portmapping Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-28447: Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, driver security feature bypass
CVE-2021-28448: Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28449: Microsoft Office Remote Code Execution Vulnerability
Key phrases: microsoft office remote code execution
CVE-2021-28450: Microsoft SharePoint Denial of Service Vulnerability
Key phrases: microsoft sharepoint denial of service
CVE-2021-28451: Microsoft Excel Remote Code Execution Vulnerability
Key phrases: microsoft excel remote code execution
CVE-2021-28452: Microsoft Outlook Memory Corruption Vulnerability
Key phrases: memory corruption
CVE-2021-28453: Microsoft Word Remote Code Execution Vulnerability
Key phrases: microsoft word remote code execution
CVE-2021-28454: Microsoft Excel Remote Code Execution Vulnerability
Key phrases: microsoft excel remote code execution
CVE-2021-28455: Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28456: Microsoft Excel Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-28457: Visual Studio Code Remote Code Execution Vulnerability
Key phrases: visual studio code remote code execution
CVE-2021-28458: Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-28459: Azure DevOps Server Spoofing Vulnerability
Key phrases: spoofing
CVE-2021-28460: Azure Sphere Unsigned Code Execution Vulnerability
Key phrases: azure sphere unsigned code execution
CVE-2021-28461: Dynamics Finance and Operations Cross-site Scripting Vulnerability
Key phrases: cross-site scripting
CVE-2021-28464: VP9 Video Extensions Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28465: Web Media Extensions Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28466: Raw Image Extension Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28468: Raw Image Extension Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28469: Visual Studio Code Remote Code Execution Vulnerability
Key phrases: visual studio code remote code execution
CVE-2021-28470: Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
Key phrases: extension remote code execution
CVE-2021-28471: Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28472: Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28473: Visual Studio Code Remote Code Execution Vulnerability
Key phrases: visual studio code remote code execution
CVE-2021-28474: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28475: Visual Studio Code Remote Code Execution Vulnerability
Key phrases: visual studio code remote code execution
CVE-2021-28476: Windows Hyper-V Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28477: Visual Studio Code Remote Code Execution Vulnerability
Key phrases: visual studio code remote code execution
CVE-2021-28478: Microsoft SharePoint Server Spoofing Vulnerability
Key phrases: microsoft sharepoint server spoofing
CVE-2021-28479: Windows CSC Service Information Disclosure Vulnerability
Key phrases: windows csc service information disclosure
CVE-2021-28480: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28481: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28482: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28483: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-28484: An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not validate the length of the request, which can lead to a state where yubihsm-connector becomes stuck in a loop waiting for the YubiHSM to send it data, preventing any further operations until the yubihsm-connector is restarted. An attacker can send 0, 1, or 2 bytes to trigger this.
CVE-2021-28485: In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application.
Key phrases: files on the system that are not intended, relative path traversal
CVE-2021-28488: Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already granted a highly privileged role). Users in the same AMOS authorization group can retrieve managed-network data that was not set to be accessible to the entire group (i.e., was only set to be accessible to a subset of that group).
Key phrases: incorrect access control
CVE-2021-28490: In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.
Key phrases: csrfguard
CVE-2021-28492: Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format.
Key phrases: recoverable format
CVE-2021-28493: In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.32.0 and prior releases
Key phrases: execute commands
CVE-2021-28494: In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases
Key phrases: authentication, authentication bypass
CVE-2021-28495: In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train
Key phrases: api access, authentication bypass
CVE-2021-28496: On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the device. The affected EOS Versions are: all releases in 4.22.x train, 4.23.9 and below releases in the 4.23.x train, 4.24.7 and below releases in the 4.24.x train, 4.25.4 and below releases in the 4.25.x train, 4.26.1 and below releases in the 4.26.x train
CVE-2021-28497: In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train
Key phrases: bash shell, unprivileged users
CVE-2021-28498: In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and prior releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train
Key phrases: clear text, complete access
CVE-2021-28499: In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train
Key phrases: clear text
CVE-2021-28500: An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA APIs by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
Key phrases: unrestricted access, nopassword configuration
CVE-2021-28501: An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA APIs by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
Key phrases: unrestricted access, nopassword configuration
CVE-2021-28503: The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.
Key phrases: access the device via eAPI
CVE-2021-28504: On Arista Strata family products which have TCAM profile feature enabled when Port IPv4 access-list has a rule which matches on vxlan as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected.
CVE-2021-28505: On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.
CVE-2021-28506: An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.
Key phrases: a factory reset of the device, gnoi apis
CVE-2021-28507: An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.
Key phrases: denied requests
CVE-2021-28508: This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to other authorized users, which could cause IPsec traffic to be decrypted or modified by other authorized users on the device.
Key phrases: internally found
CVE-2021-28509: This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to other authorized users, which could cause MACsec traffic to be decrypted or modified by other authorized users on the device.
Key phrases: internally found
CVE-2021-28510: For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.
Key phrases: service unavailable
CVE-2021-28511: This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches the packet flow. This could allow a host with an IP address in a range that matches the range allowed by a NAT ACL and a range denied by a Security ACL to be forwarded incorrectly as it should have been denied by the Security ACL. This can enable an ACL bypass.
Key phrases: security ACL bypass, be forwarded incorrectly as it should have been, internally found
CVE-2021-28543: Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, an assertion failure or NULL pointer dereference can be triggered in Varnish Cache through the varnish-modules header.append() and header.copy() functions. For some Varnish Configuration Language (VCL) files, this gives remote clients an opportunity to cause a Varnish Cache restart. A restart reduces overall availability and performance due to an increased number of cache misses, and may cause higher load on backend servers.
Key phrases: denial of service (daemon restart), cause a denial of service (daemon restart, assertion failure, null pointer dereference, higher load, availability
CVE-2021-28544: Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.
Key phrases: regression