yahoo-inc/cve-impacts huggingface dataset:
CVE-2021-36791: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.
Key phrases: Information Disclosure of application registration data, information disclosure
CVE-2021-36792: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.
Key phrases: access control
CVE-2021-36793: The routes (aka Extbase Yaml Routes) extension before 2.1.1 for TYPO3, when CsrfTokenViewHelper is used, allows Sensitive Information Disclosure because a session identifier is unsafely present in HTML output.
Key phrases: Sensitive Information Disclosure because a session identifier is, sensitive information disclosure
CVE-2021-36794: In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Investigate main process.
Key phrases: tls verifications
CVE-2021-36795: A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1. An underprivileged linux user, if certain environment criteria are met, can gain additional privileges.
Key phrases: gain additional privileges, 6.5.1d-hotfix10, permission issue, privilege escalation
CVE-2021-36797: In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation
Key phrases: root access
CVE-2021-36798: A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers to crash the C2 server thread and block beacons' communication with it.
Key phrases: crash the C2 server thread and block beacons, denial-of-service (dos)
CVE-2021-36799: KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: read project information, hard coded password
CVE-2021-3680: showdoc is vulnerable to Missing Cryptographic Step
Key phrases: missing cryptographic step
CVE-2021-36800: Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /{company_id}/sales/invoices/{invoice_id} with an items[0][price] that includes a PHP callable function is executed directly. This issue was fixed in version 2.1.13 of the product.
Key phrases: code injection
CVE-2021-36801: Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, companies[0]. This issue was fixed in version 2.1.13 of the product.
Key phrases: bypass issue in the user-controllable, authentication bypass
CVE-2021-36802: Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'locale' variable and sending it in an otherwise normal HTTP POST request. This issue was fixed in version 2.1.13 of the product.
Key phrases: denial-of-service, denial of service
CVE-2021-36803: Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 2.1.13 of the product.
CVE-2021-36804: Akaunting version 2.1.12 and earlier suffers from a password reset spoofing vulnerability, wherein an attacker can proxy password reset requests through a running Akaunting instance, if that attacker knows the target's e-mail address. This issue was fixed in version 2.1.13 of the product. Please note that this issue is ultimately caused by the defaults provided by the Laravel framework, specifically how proxy headers are handled with respect to multi-tenant implementations. In other words, while this is not technically a vulnerability in Laravel, this default configuration is very likely to lead to practically identical identical vulnerabilities in Laravel projects that implement multi-tenant applications.
Key phrases: password reset spoofing
CVE-2021-36805: Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the sales invoice processing component of the application. This issue was fixed in version 2.1.13 of the product.
CVE-2021-36806: A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance older than version 4.5.3.4.
Key phrases: an error page on Sophos Email Appliance older, xss, open redirect
CVE-2021-36807: An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.
Key phrases: sqli, execute code
CVE-2021-36808: A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.
Key phrases: bypass the app password using a race condition
CVE-2021-36809: A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a denial of service and data loss, in all versions of Sophos SSL VPN client.
Key phrases: overwrite arbitrary files, denial of service, data loss
CVE-2021-3681: A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the ``build_ignore`` list in "galaxy.yml" include files in the ``.tar.gz`` file. This contains sensitive info, such as the user's Ansible Galaxy API key and any secrets in ``ansible`` or ``ansible-playbook`` verbose output without the``no_log`` redaction. Currently, there is no way to deprecate a Collection Or delete a Collection Version. Once published, anyone who downloads or installs the collection can view the secrets.
CVE-2021-3682: A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full. A malicious SPICE client could use this flaw to make QEMU call free() with faked heap chunk metadata, resulting in a crash of QEMU or potential code execution with the privileges of the QEMU process on the host.
Key phrases: crash, code execution
CVE-2021-36821: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in WPMU DEV Forminator – Contact Form, Payment Form & Custom Form Builder plugin <= 1.14.11 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36823: Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress Absolutely Glamorous Custom Admin plugin <= 6.8versions.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36826: Authenticated (subscriber or higher user role if allowed to access projects) Stored Cross-Site Scripting (XSS) vulnerability in weDevs WP Project Manager plugin <= 2.4.13versions.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36827: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.6.9 at WordPress via "label".
Key phrases: stored cross-site scripting (xss)
CVE-2021-36828: Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36829: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 at WordPress.
Key phrases: authenticated (admin+) stored cross-site scripting (xss)
CVE-2021-3683: showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Key phrases: cross-site request forgery (csrf)
CVE-2021-36830: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Comment Guestbook plugin <= 0.8.0 at WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36832: WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline" (&message_data[16][headline]) input.
CVE-2021-36833: Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36839: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Follow Buttons Bar plugin <= 4.73 at WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-3684: A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull container images from the registry as the associated user.
CVE-2021-36841: Authenticated Stored Cross-Site Scripting (XSS) vulnerability in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.7, vulnerable parameter &yith_maintenance_newsletter_submit_label. Possible even when unfiltered HTML is disallowed by WordPress configuration.
Key phrases: authenticated stored cross-site scripting (xss)
CVE-2021-36843: Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Floating Social Media Icon plugin (versions <= 4.3.5) Social Media Configuration form. Requires high role user like admin.
Key phrases: authenticated stored cross-site scripting (xss)
CVE-2021-36844: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36845: Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.8, there are 46 vulnerable parameters that were missed by the vendor while patching the 1.3.7 version to 1.3.8. Vulnerable parameters: 1 - "Newsletter" tab, &yith_maintenance_newsletter_submit_label parameter: payload should start with a single quote (') symbol to break the context, i.e.: NOTIFY ME' autofocus onfocus=alert(/Visse/);// v=' - this payload will be auto triggered while admin visits this page/tab. 2 - "General" tab issues, vulnerable parameters: &yith_maintenance_message, &yith_maintenance_custom_style, &yith_maintenance_mascotte, &yith_maintenance_title_font[size], &yith_maintenance_title_font[family], &yith_maintenance_title_font[color], &yith_maintenance_paragraph_font[size], &yith_maintenance_paragraph_font[family], &yith_maintenance_paragraph_font[color], &yith_maintenance_border_top. 3 - "Background" tab issues, vulnerable parameters: &yith_maintenance_background_image, &yith_maintenance_background_color. 4 - "Logo" tab issues, vulnerable parameters: &yith_maintenance_logo_image, &yith_maintenance_logo_tagline, &yith_maintenance_logo_tagline_font[size], &yith_maintenance_logo_tagline_font[family], &yith_maintenance_logo_tagline_font[color]. 5 - "Newsletter" tab issues, vulnerable parameters: &yith_maintenance_newsletter_email_font[size], &yith_maintenance_newsletter_email_font[family], &yith_maintenance_newsletter_email_font[color], &yith_maintenance_newsletter_submit_font[size], &yith_maintenance_newsletter_submit_font[family], &yith_maintenance_newsletter_submit_font[color], &yith_maintenance_newsletter_submit_background, &yith_maintenance_newsletter_submit_background_hover, &yith_maintenance_newsletter_title, &yith_maintenance_newsletter_action, &yith_maintenance_newsletter_email_label, &yith_maintenance_newsletter_email_name, &yith_maintenance_newsletter_submit_label, &yith_maintenance_newsletter_hidden_fields. 6 - "Socials" tab issues, vulnerable parameters: &yith_maintenance_socials_facebook, &yith_maintenance_socials_twitter, &yith_maintenance_socials_gplus, &yith_maintenance_socials_youtube, &yith_maintenance_socials_rss, &yith_maintenance_socials_skype, &yith_maintenance_socials_email, &yith_maintenance_socials_behance, &yith_maintenance_socials_dribble, &yith_maintenance_socials_flickr, &yith_maintenance_socials_instagram, &yith_maintenance_socials_pinterest, &yith_maintenance_socials_tumblr, &yith_maintenance_socials_linkedin.
CVE-2021-36846: Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Premio Chaty (WordPress plugin) <= 2.8.3
Key phrases: stored cross-site scripting (xss)
CVE-2021-36847: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36848: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Feather (WordPress plugin) versions <= 2.0.4
Key phrases: stored cross-site scripting (xss)
CVE-2021-36849: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ren Hermenau's Social Media Share Buttons plugin <= 3.8.1 at WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36850: Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer  Auto & Manual Rename plugin (versions <= 5.1.9). Affected parameters "post_title", "filename", "lock". This allows changing the uploaded media title, media file name, and media locking state.
Key phrases: changing the uploaded media title, cross-site request forgery (csrf)
CVE-2021-36851: Authenticated (editor or higher user role) Cross-Site Scripting (XSS) vulnerability in Web-Settler Testimonial Slider  Free Testimonials Slider Plugin (WordPress plugin) via parameters mpsp_posts_bg_color, mpsp_posts_description_color, mpsp_slide_nav_button_color.
Key phrases: cross-site scripting (xss)
CVE-2021-36852: Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress.
Key phrases: cross-site request forgery (csrf)
CVE-2021-36854: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.
Key phrases: cross-site request forgery (csrf)
CVE-2021-36855: Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.
Key phrases: cross-site scripting (xss), cross-site request forgery (csrf)
CVE-2021-36857: Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.1 at WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36858: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36861: Cross-Site Request Forgery (CSRF) vulnerability in Rich Reviews by Starfish plugin <= 1.9.14 at WordPress allows an attacker to delete reviews.
Key phrases: delete reviews, cross-site request forgery (csrf)
CVE-2021-36863: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36864: Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
Key phrases: reflected cross-site scripting (xss)
CVE-2021-36865: Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 at WordPress allows attackers to change the content of the quiz.
Key phrases: change the content of the quiz, insecure direct object references (idor)
CVE-2021-36866: Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables plugin <= 3.1.2 at WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36867: Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19 on WordPress possible for users with contributor or higher user rights.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36869: Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post.
Key phrases: reflected cross-site scripting (xss)
CVE-2021-36870: Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (versions <= 8.1.12). Vulnerable parameters: &dataset_name, &wpgmza_gdpr_retention_purpose, &wpgmza_gdpr_company_name, &name #2, &name, &polyname #2, &polyname, &address.
Key phrases: authenticated persistent cross-site scripting (xss)
CVE-2021-36871: Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plugin (versions <= 8.1.11). Vulnerable parameters: &wpgmaps_marker_category_name, Value > &attributes[], Name > &attributes[], &icons[], &names[], &description, &link, &title.
Key phrases: authenticated persistent cross-site scripting (xss)
CVE-2021-36872: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at &widget-wpp[2][post_type].
Key phrases: authenticated persistent cross-site scripting (xss)
CVE-2021-36873: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.11). Vulnerable parameter: &blockcountry_blockmessage.
Key phrases: authenticated persistent cross-site scripting (xss)
CVE-2021-36874: Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5).
Key phrases: authenticated insecure direct object references (idor)
CVE-2021-36875: Authenticated Reflected Cross-Site Scripting (XSS) vulnerability in WordPress uListing plugin (versions <= 2.0.5). Vulnerable parameters: &filter[id], &filter[user], &filter[expired_date], &filter[created_date], &filter[updated_date].
Key phrases: authenticated reflected cross-site scripting (xss)
CVE-2021-36876: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks CSRF checks on plugin administration pages.
Key phrases: cross-site request forgery (csrf)
CVE-2021-36877: Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to modify user roles.
Key phrases: cross-site request forgery (csrf)
CVE-2021-36878: Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to update settings.
Key phrases: cross-site request forgery (csrf), update settings
CVE-2021-36879: Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5). Possible if WordPress configuration allows user registration.
Key phrases: user registration, unauthenticated privilege escalation
CVE-2021-3688: A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
Key phrases: access unauthorized information or possibly conduct further attacks, confidentiality, confidentiality and integrity
CVE-2021-36880: Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable parameter: custom.
Key phrases: unauthenticated sql injection (sqli)
CVE-2021-36884: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions.
Key phrases: authenticated persistent cross-site scripting (xss)
CVE-2021-36885: Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1).
Key phrases: unauthenticated stored cross-site scripting (xss)
CVE-2021-36886: Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).
Key phrases: cross-site request forgery (csrf)
CVE-2021-36887: Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitronEmail" and "tarteaucitronPass".
Key phrases: cross-site request forgery (csrf), cross-site scripting (xss)
CVE-2021-36888: Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.
Key phrases: unauthenticated arbitrary options update, full website compromise
CVE-2021-36889: Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities were discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.6).
Key phrases: stored authenticated cross-site scripting (xss)
CVE-2021-3689: yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
Key phrases: predictable algorithm
CVE-2021-36890: Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2.2.2 at WordPress.
Key phrases: cross-site request forgery (csrf)
CVE-2021-36891: Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings.
Key phrases: changing the plugin settings, cross-site request forgery (csrf)
CVE-2021-36893: Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Responsive Tabs (WordPress plugin) <= 4.0.5
Key phrases: stored cross-site scripting (xss)
CVE-2021-36895: Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.
Key phrases: unauthenticated cross-site scripting (xss)
CVE-2021-36896: Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2
Key phrases: stored cross-site scripting (xss)
CVE-2021-36898: Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress.
Key phrases: auth. sql injection (sqli)
CVE-2021-36899: Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.
Key phrases: reflected cross-site scripting (xss)
CVE-2021-3690: A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.
Key phrases: cause a denial of service, buffer leak, availability, memory exhaustion
CVE-2021-36901: Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Phil Baker's Age Gate plugin <= 2.17.0 at WordPress.
Key phrases: unauthenticated stored cross-site scripting (xss)
CVE-2021-36905: Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.4 on WordPress.
Key phrases: multiple auth, stored cross-site scripting (xss)
CVE-2021-36906: Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6 on WordPress.
Key phrases: insecure direct object references (idor)
CVE-2021-36908: Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd. WP Reset PRO plugin <= 5.98 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2021-36909: Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization. It leads to a complete website reset and takeover.
Key phrases: wipe the entire database regardless of their authorization, authenticated database reset, website reset, takeover
CVE-2021-36910: Authenticated (admin user role) Stored Cross-Site Scripting (XSS) in WP-Appbox (WordPress plugin) <= 4.3.20.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36911: Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Comment Engine Pro plugin (versions <= 1.0), could be exploited by users with Editor or higher role.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36912: Stored Cross-Site Scripting (XSS) vulnerability in Andrea Pernici News Sitemap for Google plugin <= 1.0.16 on WordPress, attackers must have contributor or higher user role.
Key phrases: stored cross-site scripting (xss)
CVE-2021-36913: Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe.
Key phrases: change options and inject scripts into the footer, unauthenticated options change, content injection
CVE-2021-36914: Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) in CalderaWP License Manager (WordPress plugin) <= 1.2.11.
Key phrases: cross-site request forgery (csrf), reflected cross-site scripting (xss)
CVE-2021-36915: Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder plugin <= 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on.
Key phrases: uploading the JSON file and updating the options, cross-site request forgery (csrf)
CVE-2021-36916: The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP address is retrieved and used inside a SQL query. The function "hmwp_get_user_ip" tries to retrieve the IP address from multiple headers, including IP address headers that the user can spoof, such as "X-Forwarded-For." As a result, the malicious payload supplied in one of these IP address headers will be directly inserted into the SQL query, making SQL injection possible.
Key phrases: sql injection, spoofing
CVE-2021-36917: WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used to deactivate the plugin.
Key phrases: unauthenticated user, reset token
CVE-2021-36919: Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnerable parameters (&id, &assignee).
Key phrases: authenticated reflected cross-site scripting (xss), vulnerable parameters
CVE-2021-3692: yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
Key phrases: predictable algorithm
CVE-2021-36920: Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered in WordPress plugin Download Monitor (versions <= 4.4.6).
Key phrases: authenticated reflected cross-site scripting (xss)
CVE-2021-36921: AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.
Key phrases: gain administrative access, improper authentication
CVE-2021-36922: RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices (Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
Key phrases: achieve unauthorized access to USB devices (Escalation, escalation of privileges, denial of service, code execution, information disclosure
CVE-2021-36923: RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
Key phrases: achieve unauthorized access to USB device privileged IN, escalation of privileges, denial of service, code execution, information disclosure
CVE-2021-36924: RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow (leading to Escalation of Privileges, Denial of Service, and Code Execution) via a crafted Device IO Control packet to a device.
Key phrases: achieve a pool overflow (leading to Escalation, escalation of privileges, denial of service, code execution
CVE-2021-36925: RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
Key phrases: achieve an arbitrary read or write operation from, escalation of privileges, denial of service, code execution, information disclosure
CVE-2021-36926: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-26433, CVE-2021-36932, CVE-2021-36933.
Key phrases: driver information disclosure
CVE-2021-36927: Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-36928: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-36929: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-3693: LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.
Key phrases: remote code execution, information disclosure
CVE-2021-36930: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26436.
Key phrases: elevation of privilege
CVE-2021-36931: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-36932: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-26433, CVE-2021-36926, CVE-2021-36933.
Key phrases: driver information disclosure
CVE-2021-36933: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-26433, CVE-2021-36926, CVE-2021-36932.
Key phrases: driver information disclosure
CVE-2021-36934: <p>An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p><p>An attacker must have the ability to execute code on a victim system to exploit this vulnerability.</p><p>After installing this security update, you <em>must</em> manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. <strong>Simply installing this security update will not fully mitigate this vulnerability.</strong> See <a href="https://support.microsoft.com/topic/1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7">KB5005357- Delete Volume Shadow Copies</a>.</p>
Key phrases: run arbitrary code, elevation of privilege, elevation privilege, execute code
CVE-2021-36936: Windows Print Spooler Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-36947, CVE-2021-36958.
Key phrases: remote code execution
CVE-2021-36937: Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-36938: Windows Cryptographic Primitives Library Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-3694: LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.
Key phrases: remote code execution, information disclosure
CVE-2021-36940: Microsoft SharePoint Server Spoofing Vulnerability
Key phrases: microsoft sharepoint server spoofing
CVE-2021-36941: Microsoft Word Remote Code Execution Vulnerability
Key phrases: microsoft word remote code execution
CVE-2021-36942: Windows LSA Spoofing Vulnerability
Key phrases: windows lsa spoofing
CVE-2021-36943: Azure CycleCloud Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33762.
Key phrases: azure cyclecloud elevation of privilege
CVE-2021-36945: Windows 10 Update Assistant Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-36946: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Key phrases: cross-site scripting
CVE-2021-36947: Windows Print Spooler Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-36936, CVE-2021-36958.
Key phrases: remote code execution
CVE-2021-36948: Windows Update Medic Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-36949: Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability
Key phrases: Authentication Bypass, authentication bypass
CVE-2021-3695: A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform some triage over the heap layout to achieve signifcant results, also the values written into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 versions prior grub-2.12.
Key phrases: out-of-bounds write, heap data corruption, arbitrary code execution, signifcant results, valid payloads, out of bounds write
CVE-2021-36950: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Key phrases: cross-site scripting
CVE-2021-36952: Visual Studio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-36953: Windows TCP/IP Denial of Service Vulnerability
Key phrases: windows tcp ip denial of service
CVE-2021-36954: Windows Bind Filter Driver Elevation of Privilege Vulnerability
Key phrases: windows bind filter driver elevation of privilege
CVE-2021-36955: Windows Common Log File System Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-36963, CVE-2021-38633.
Key phrases: windows common log file system driver elevation of privilege
CVE-2021-36956: Azure Sphere Information Disclosure Vulnerability
Key phrases: azure sphere information disclosure
CVE-2021-36957: Windows Desktop Bridge Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-36958: Windows Print Spooler Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-36936, CVE-2021-36947.
Key phrases: remote code execution
CVE-2021-36959: Windows Authenticode Spoofing Vulnerability
Key phrases: windows authenticode spoofing
CVE-2021-3696: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
Key phrases: heap out-of-bounds write, data corruption, secure boot circumvention, out of bounds write, arbitrary code, arbitrary code execution
CVE-2021-36960: Windows SMB Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36972.
Key phrases: windows smb information disclosure
CVE-2021-36961: Windows Installer Denial of Service Vulnerability
Key phrases: denial of service
CVE-2021-36962: Windows Installer Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-36963: Windows Common Log File System Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-36955, CVE-2021-38633.
Key phrases: windows common log file system driver elevation of privilege
CVE-2021-36964: Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38630.
Key phrases: windows event tracing elevation of privilege
CVE-2021-36965: Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
Key phrases: windows wlan autoconfig service remote code execution
CVE-2021-36966: Windows Subsystem for Linux Elevation of Privilege Vulnerability
Key phrases: windows subsystem for linux elevation of privilege
CVE-2021-36967: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
Key phrases: windows wlan autoconfig service elevation of privilege
CVE-2021-36968: Windows DNS Elevation of Privilege Vulnerability
Key phrases: windows dns elevation of privilege
CVE-2021-36969: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38635, CVE-2021-38636.
Key phrases: information disclosure
CVE-2021-3697: A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
Key phrases: be written in heap, data corruption, code execution, secure boot circumvention
CVE-2021-36970: Windows Print Spooler Spoofing Vulnerability
Key phrases: windows print spooler spoofing
CVE-2021-36972: Windows SMB Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36960.
Key phrases: windows smb information disclosure
CVE-2021-36973: Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
Key phrases: windows redirected drive buffering system elevation of privilege
CVE-2021-36974: Windows SMB Elevation of Privilege Vulnerability
Key phrases: windows smb elevation of privilege
CVE-2021-36975: Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38639.
Key phrases: elevation of privilege
CVE-2021-36976: libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
Key phrases: use-after-free, use after free
CVE-2021-36977: matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry), related to use of HDF5 1.12.0.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2021-36978: QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream write fails.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2021-36979: Unicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb and tcg_cpu_exec_armeb).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-3698: A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.
Key phrases: authenticate successfully, confidentiality
CVE-2021-36980: Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
Key phrases: use-after-free, use after free
CVE-2021-36981: In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary code.
Key phrases: execute arbitrary code, insecure java deserialization
CVE-2021-36982: AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request.
Key phrases: OS Command Injection because of missing input validation, os command injection
CVE-2021-36983: replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock.
Key phrases: gain root privileges, gain root privileges via a symlink attack on
CVE-2021-36985: There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and cause the system to restart.
Key phrases: code injection, exhaust system resources
CVE-2021-36986: There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
Key phrases: escalate permissions
CVE-2021-36987: There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause the system to restart.
Key phrases: race conditions, system to restart
CVE-2021-36988: There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.
Key phrases: parameter verification issue, service integrity
CVE-2021-36989: There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
Key phrases: kernel crash, escalate permissions
CVE-2021-36990: There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
Key phrases: escalate permissions
CVE-2021-36991: There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulnerability by creating malicious file paths can cause unauthorized file access.
Key phrases: unauthorized file access
CVE-2021-36992: There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: public key verification, service confidentiality
CVE-2021-36993: There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.
Key phrases: memory leaks, service availability
CVE-2021-36994: There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.
Key phrases: trustlist strings, race conditions, exceptions
CVE-2021-36995: There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.
Key phrases: unauthorized file access
CVE-2021-36996: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual information.
Key phrases: improper verification, transmission of certain virtual information
CVE-2021-36997: There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitation of this vulnerability may cause the Gallery or Files app to exit unexpectedly.
Key phrases: low memory error, exit unexpectedly
CVE-2021-36998: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to read an array that is out of bounds.
Key phrases: read an array that is out of bounds, improper verification
CVE-2021-36999: There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and inducing users to open the images may cause remote code execution.
Key phrases: buffer overflow, remote code execution
CVE-2021-3700: A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.
Key phrases: use-after-free, use after free
CVE-2021-37001: There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value to be modified.
Key phrases: be modified, register tampering
CVE-2021-37002: There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed.
Key phrases: memory out-of-bounds access, malicious code, out of bounds access
CVE-2021-37003: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
Key phrases: improper input validation, kernel crash
CVE-2021-37004: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
Key phrases: improper input validation, kernel crash
CVE-2021-37005: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
Key phrases: improper input validation, kernel crash
CVE-2021-37006: There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is affected.
Key phrases: improper preservation of permissions, confidentiality of users
CVE-2021-37007: There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
Key phrases: out-of-bounds read, kernel crash
CVE-2021-37008: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.
Key phrases: improper input validation, kernel crash
CVE-2021-37009: There is a Configuration vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is affected.
Key phrases: configuration, confidentiality of users
CVE-2021-3701: A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate user in a place they did not expect. The highest threat from this vulnerability is to confidentiality and integrity.
Key phrases: pre-create the directory, to write files, confidentiality, confidentiality and integrity
CVE-2021-37010: There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the confidentiality of users is affected.
Key phrases: exposure of sensitive information, confidentiality of users
CVE-2021-37011: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
Key phrases: stack-based buffer overflow, out-of-bounds read, out of bounds read