yahoo-inc/cve-impacts huggingface dataset:
CVE-2021-3738: In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism called 'association groups'. These handles can reference connections to our sam.ldb database. However while the database was correctly shared, the user credentials state was only pointed at, and when one connection within that association group ended, the database would be left pointing at an invalid 'struct session_info'. The most likely outcome here is a crash, but it is possible that the use-after-free could instead allow different user state to be pointed at and this might allow more privileged access.
Key phrases: be pointed at and this might allow more, more privileged access, use-after-free, crash, use after free
CVE-2021-37381: Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access other users' private information such as photos through CSRF. For example: any student's photo information can be accessed through /gmis/(S([1]))/student/grgl/PotoImageShow/?bh=[2]. Among them, the code in [1] is a random string generated according to the user's login related information. It can protect the user's identity, but it can not effectively prevent unauthorized access. The code in [2] is the student number of any student. The attacker can carry out CSRF attack on the system by modifying [2] without modifying [1].
Key phrases: csrf, unauthorized access
CVE-2021-37384: A remote command execution (RCE) vulnerability in the web interface component of Furukawa Electric LatAM 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 allows unauthenticated attackers to send arbitrary commands to the device via unspecified vectors.
Key phrases: send arbitrary commands, send arbitrary commands to the device via unspecified, remote command execution (rce), unspecified vectors
CVE-2021-37386: Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function.
Key phrases: html injection
CVE-2021-37388: A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution.
Key phrases: gain remote code execution, crash the webserver and might even gain remote, buffer overflow
CVE-2021-37389: Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter.
Key phrases: stored XSS via main/install/index.php, stored xss
CVE-2021-3739: A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires CAP_SYS_ADMIN. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.
Key phrases: crash the system or leak kernel internal information, null pointer dereference flaw, system availability, crash system
CVE-2021-37390: A Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI (social network search feature).
Key phrases: reflected xss
CVE-2021-37391: A user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user, e.g., the administrator, through main/social/search.php, main/inc/lib/social.lib.php and steal cookies or execute arbitrary code on the administration side via a stored XSS vulnerability via social network the send invitation feature.
Key phrases: execute arbitrary code, stored xss, steal cookie
CVE-2021-37392: In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API functions are enabled, the attacker can use API to update user nickname with XSS payload and achieve stored XSS. Users who view the articles published by the injected user will trigger the XSS.
Key phrases: xss payload, stored xss
CVE-2021-37393: In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password" function to inject XSS payloads into nickname variable, and achieve stored XSS. Users who view the articles published by the injected user will trigger the XSS.
Key phrases: xss payloads, stored xss
CVE-2021-37394: In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
CVE-2021-37400: An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the PLC user program may be uploaded, altered, and/or downloaded.
Key phrases: obtain the user credentials
CVE-2021-37401: An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/or downloaded.
Key phrases: obtain the user credentials, file servers, backup repositories, zld files
CVE-2021-37402: OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that is mishandled when the legacy dataretrieval endpoint has been enabled.
Key phrases: XSS via binary data that is mishandled when, xss
CVE-2021-37403: OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and an App Loader relative URL is used.
Key phrases: XSS via a code snippet (user-, xss
CVE-2021-37404: There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.
Key phrases: heap buffer overflow, denial of service, arbitrary code, arbitrary code execution
CVE-2021-37409: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
Key phrases: potentially enable escalation of privilege via local access, improper access control, escalation privilege
CVE-2021-37412: The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar.
Key phrases: XSS via the Title field of a Radar, xss
CVE-2021-37413: GRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated attacker can exploit this vulnerability to obtain administrative access to the webpage, access the user database, modify web content and upload custom files. The backend login script does not verify and sanitize user-provided strings.
Key phrases: obtain administrative access, sql injection
CVE-2021-37414: Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.
Key phrases: get a valid user's APIKEY without authentication
CVE-2021-37415: Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.
Key phrases: bypass that allows a few REST-API URLs, authentication bypass, a few REST-API URLs without authentication
CVE-2021-37416: Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.
Key phrases: reflected xss
CVE-2021-37417: Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation.
Key phrases: bypass due to improper parameter validation, CAPTCHA bypass, captcha bypass
CVE-2021-37419: Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.
Key phrases: ssrf
CVE-2021-37420: Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.
Key phrases: mail spoofing
CVE-2021-37421: Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass.
Key phrases: restriction bypass, admin portal access-restriction bypass
CVE-2021-37422: Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases.
Key phrases: sql injection
CVE-2021-37423: Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.
Key phrases: linked applications takeover
CVE-2021-37424: ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.
Key phrases: domain user account takeover
CVE-2021-37425: Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key.
Key phrases: XXE attacks, xxe, infosetchanges changes
CVE-2021-3743: An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
Key phrases: gain access, gain access to out-of-bounds, out-of-bounds (oob), system crash, leak of internal kernel information, system availability, out of bounds memory
CVE-2021-37436: Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing personal content via a factory reset. Also, the vendor has reportedly indicated that they are working on mitigations.
Key phrases: obtain sensitive information, a device after a factory reset, physical access, software
CVE-2021-37439: NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability.
Key phrases: path traversal
CVE-2021-3744: A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.
Key phrases: denial of service (memory consumption), cause a denial of service (memory consumption, memory leak flaw
CVE-2021-37440: NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.
Key phrases: path traversal for file disclosure via the logprop?file=/
CVE-2021-37441: NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.
Key phrases: path traversal for file deletion via the logdelete?file=/
CVE-2021-37442: NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.
Key phrases: read files, path traversal
CVE-2021-37443: NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
Key phrases: path traversal via the logdeleteselected check0 parameter for
CVE-2021-37444: NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows startup folder, a file for the inbuilt Out-Going Message function, or a file for the the inbuilt Autodial function.
Key phrases: directory traversal weakness, code execution
CVE-2021-37445: In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.
Key phrases: directory traversal
CVE-2021-37446: In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.
Key phrases: directory traversal
CVE-2021-37447: In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.
Key phrases: directory traversal
CVE-2021-37448: Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
Key phrases: cross site scripting (xss)
CVE-2021-37449: Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).
Key phrases: cross site scripting (xss)
CVE-2021-3745: flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type
Key phrases: unrestricted upload of file with dangerous type
CVE-2021-37450: Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).
Key phrases: cross site scripting (xss)
CVE-2021-37451: Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).
Key phrases: cross site scripting (xss)
CVE-2021-37452: NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.
Key phrases: discover cleartext login information relating to users by
CVE-2021-37453: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).
Key phrases: cross site scripting (xss)
CVE-2021-37454: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
Key phrases: cross site scripting (xss)
CVE-2021-37455: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
Key phrases: cross site scripting (xss)
CVE-2021-37456: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
Key phrases: cross site scripting (xss)
CVE-2021-37457: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
Key phrases: cross site scripting (xss)
CVE-2021-37458: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
Key phrases: cross site scripting (xss)
CVE-2021-37459: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
Key phrases: cross site scripting (xss)
CVE-2021-3746: A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerability is to system availability. This issue affects libtpms versions before 0.8.5, before 0.7.9 and before 0.6.6.
Key phrases: system availability
CVE-2021-37460: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
Key phrases: cross site scripting (xss)
CVE-2021-37461: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
Key phrases: cross site scripting (xss)
CVE-2021-37462: Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
Key phrases: cross site scripting (xss)
CVE-2021-37463: In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
Key phrases: xss
CVE-2021-37464: In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
Key phrases: xss
CVE-2021-37465: In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).
Key phrases: xss
CVE-2021-37466: In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
Key phrases: xss
CVE-2021-37467: In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).
Key phrases: xss
CVE-2021-37468: NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.
Key phrases: discover cleartext user account information by reading the
CVE-2021-37469: In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem.
Key phrases: path traversal
CVE-2021-3747: The MacOS version of Multipass, version 1.7.0, fixed in 1.7.2, accidentally installed the application directory with incorrect owner.
Key phrases: incorrect owner
CVE-2021-37470: In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.
Key phrases: inject arbitrary JavaScript, cross site scripting (xss)
CVE-2021-37471: Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line.
Key phrases: shell escape sequence, availability
CVE-2021-37473: In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a post request, which results in arbitrary sql query execution in the backend database.
Key phrases: sql injection
CVE-2021-37475: In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`, which results in arbitrary sql query execution in the backend database.
Key phrases: sql injection, arbitrary sql query execution
CVE-2021-37476: In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, which results in arbitrary sql query execution in the backend database.
Key phrases: sql injection
CVE-2021-37477: In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which results in arbitrary sql query execution in the backend database.
Key phrases: sql injection
CVE-2021-37478: In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitrary sql query execution in the backend database.
Key phrases: sql injection, arbitrary sql query execution
CVE-2021-3748: A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.
Key phrases: use-after-free, denial of service condition, use after free, crash, execute code
CVE-2021-3749: axios is vulnerable to Inefficient Regular Expression Complexity
Key phrases: inefficient regular expression complexity
CVE-2021-37491: An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction() function.
Key phrases: view sensitive information via CWallet::CreateTransaction() function
CVE-2021-37492: An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll() function.
Key phrases: view sensitive information via CWallet::CreateTransactionAll() function
CVE-2021-37497: SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.
Key phrases: run arbitrary SQL commands, run arbitrary SQL commands via crafted GET request, sql injection
CVE-2021-37498: An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function.
Key phrases: trigger outbound requests to intranet servers, ssrf
CVE-2021-37499: CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.
Key phrases: inject arbitrary HTTP headers, crlf
CVE-2021-3750: A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions (such as reset) while the device is still transferring packets. This can ultimately lead to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code within the context of the QEMU process on the host. This flaw affects QEMU versions before 7.0.0.
Key phrases: execute arbitrary code, use-after-free issue, denial of service condition, use after free, crash
CVE-2021-37500: Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server.
Key phrases: overwrite any file the on the server, directory traversal
CVE-2021-37501: Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.
Key phrases: cause a denial of service via h5tools_str_sprint in, buffer overflow
CVE-2021-37502: Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.
Key phrases: run arbitrary code, run arbitrary code via the user name field, cross site scripting (xss)
CVE-2021-37504: A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2021-3751: libmobi is vulnerable to Out-of-bounds Write
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37517: An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.
Key phrases: email addresses as usernames, access control, denial of service
CVE-2021-37518: Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.
Key phrases: run arbitrary code, run arbitrary code via omnibar feature, universal cross site scripting (uxss)
CVE-2021-37519: Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.
Key phrases: cause a denial of service via crafted authenticattion, buffer overflow
CVE-2021-3752: A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Key phrases: crash the system or escalate their privileges, use-after-free, race condition, use after free, crash system, escalate privilege, confidentiality, confidentiality and integrity, availability
CVE-2021-37522: SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via crafted string to /src/db.js, /commands/mute.js, /modules/event/messageDelete.js.
Key phrases: run arbitrary SQL commands, run arbitrary SQL commands via crafted string to, sql injection
CVE-2021-37524: Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via an, cross site scripting (xss)
CVE-2021-37529: A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).
Key phrases: denial of service (context-dependent), double-free, double free
CVE-2021-3753: A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality.
Key phrases: race problem, out of bounds read, data confidentiality
CVE-2021-37530: A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.
Key phrases: denial of service
CVE-2021-37531: SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it into a location to be accessed by the system and then create a file which will trigger the XSLT engine to execute the script contained within the malicious XSL file. This can result in a full compromise of the confidentiality, integrity, and availability of the system.
Key phrases: craft a malicious XSL stylesheet file containing a, xslt, compromise, confidentiality, confidentiality and integrity, integrity and availability
CVE-2021-37532: SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.
Key phrases: gain access, gain access to directory and view the contents, improper input validation
CVE-2021-37533: Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.
Key phrases: leakage of information
CVE-2021-37534: app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.
Key phrases: Stored XSS when forking a galaxy cluster, stored xss
CVE-2021-37535: SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.
CVE-2021-37538: Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the id_category parameter to the controllers/front/category.php category controller.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the day, sql injection
CVE-2021-37539: Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.
Key phrases: unrestricted file, remote code execution
CVE-2021-3754: A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may cause trouble in getting password recovery email in case the user forgets the password.
Key phrases: trouble
CVE-2021-37540: In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.
CVE-2021-37541: In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.
Key phrases: html injection
CVE-2021-37542: In JetBrains TeamCity before 2020.2.3, XSS was possible.
Key phrases: xss
CVE-2021-37543: In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects.
Key phrases: code execution
CVE-2021-37544: In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.
Key phrases: insecure deserialization
CVE-2021-37545: In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made.
Key phrases: insufficient authentication checks
CVE-2021-37546: In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used.
Key phrases: insecure key generation mechanism
CVE-2021-37547: In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.
Key phrases: insufficient checks
CVE-2021-37548: In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.
Key phrases: passwords in cleartext
CVE-2021-37549: In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.
CVE-2021-37550: In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.
Key phrases: time-unsafe comparisons
CVE-2021-37551: In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.
CVE-2021-37552: In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.
Key phrases: xss
CVE-2021-37553: In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.
Key phrases: insecure prng
CVE-2021-37554: In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.
CVE-2021-37555: TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled BusyBox utilities (e.g., tar and nc).
Key phrases: a shell as root/superuser, default password
CVE-2021-37556: A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/csv_HostGroupLogs.php start and end parameters.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the include/, sql injection
CVE-2021-37557: A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/generateImage.php index parameter.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the include/, sql injection
CVE-2021-37558: A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via the host_name and service_description parameters. The vulnerability can be exploited only when a valid Knowledge Base URL is configured on the Knowledge Base configuration page and points to a MediaWiki instance. This relates to the proxy feature in class/centreon-knowledge/ProceduresProxy.class.php and include/configuration/configKnowledge/proxy/proxy.php.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the host_name and, sql injection
CVE-2021-3756: libmysofa is vulnerable to Heap-based Buffer Overflow
Key phrases: heap-based buffer overflow
CVE-2021-37560: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37561: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37562: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).
Key phrases: out-of-bounds read, out of bounds read
CVE-2021-37563: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37564: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
Key phrases: out-of-bounds read, out of bounds read
CVE-2021-37565: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
Key phrases: out-of-bounds read, out of bounds read
CVE-2021-37566: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7610, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37567: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
Key phrases: out-of-bounds read, out of bounds read
CVE-2021-37568: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37569: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-3757: immer is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Key phrases: improperly controlled modification of object prototype attributes, prototype pollution
CVE-2021-37570: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
Key phrases: out-of-bounds read, out of bounds read
CVE-2021-37571: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37572: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Missing authorization).
Key phrases: missing authorization
CVE-2021-37573: A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) <=1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page
Key phrases: ['inject malicious code on the server\\'s "', 'cross-site scripting (xss)']
CVE-2021-37576: arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.
Key phrases: cause host OS memory corruption via rtas_args.nargs, host os memory corruption
CVE-2021-37578: Apache jUDDI uses several classes related to Java's Remote Method Invocation (RMI) which (as an extension to UDDI) provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicious serialized object to the above RMI entries. The objects get deserialized without any check on the incoming data. In the worst case, it may let the attacker run arbitrary code remotely. For both jUDDI web service applications and jUDDI clients, the usage of RMI is disabled by default. Since this is an optional feature and an extension to the UDDI protocol, the likelihood of impact is low. Starting with 3.3.10, all RMI related code was removed.
Key phrases: run arbitrary code, malicious serialized object
CVE-2021-37579: The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the configuration set by the server. But there's an exception that the attacker can use to skip the security check (when enabled) and reaching a deserialization operation with native java serialization. Apache Dubbo 2.7.13, 3.0.2 fixed this issue by quickly fail when any unrecognized request was found.
Key phrases: exception
CVE-2021-3758: bookstack is vulnerable to Server-Side Request Forgery (SSRF)
Key phrases: server-side request forgery (ssrf)
CVE-2021-37580: A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0
Key phrases: bypass authentication
CVE-2021-37583: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37584: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
Key phrases: out-of-bounds write, out of bounds write
CVE-2021-37586: The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user (with Administrator rights) to replay a previously recorded conversation of another tenant due to insufficient validation.
Key phrases: replay a previously recorded conversation of another tenant, insufficient validation
CVE-2021-37587: In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data.
Key phrases: dac-macs
CVE-2021-37588: In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.
CVE-2021-37589: Virtua Cobranca before 12R allows SQL Injection on the login page.
Key phrases: SQL Injection on the login page, sql injection
CVE-2021-3759: A memory overflow vulnerability was found in the Linux kernels ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.
Key phrases: starve the resources, memory overflow, denial of service, system availability
CVE-2021-37592: Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
Key phrases: TCP evasion via a client with a crafted, tcp evasion
CVE-2021-37593: PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQL query in order to affect the execution of predefined SQL commands. Upon a successful SQL injection attack, an attacker can read sensitive data from the database and possibly modify database data.
Key phrases: affect the execution of predefined SQL commands, sql injection
CVE-2021-37594: In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request PDU.
CVE-2021-37595: In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request PDU.
CVE-2021-37596: Telegram Web K Alpha 0.6.1 allows XSS via a document name.
Key phrases: XSS via a document name, xss
CVE-2021-37597: WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.
Key phrases: bypass via wordpress_logged_in_[hash] manipulation, MFA bypass, MFA bypass via wordpress_logged_in_[hash] manipulation, mfa bypass
CVE-2021-37598: WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.
Key phrases: bypass of /wp-json access control, bypass of /wp-json access control via, trailing ? character
CVE-2021-37599: The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the database (and execute code in some situations) via the txtPassword parameter.
Key phrases: read the database (and execute code in, sql injection
CVE-2021-3760: A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability.
Key phrases: use-after-free, system availability, use after free, confidentiality, confidentiality and integrity
CVE-2021-37600: An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
Key phrases: integer overflow, buffer overflow, realistic environments
CVE-2021-37601: muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.
Key phrases: obtain sensitive information, obtain sensitive information (list of admins
CVE-2021-37604: In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by injecting messages with a sufficiently large frame counter value and invalid payload. This results in denial of service/valid packets in the network. There is also a possibility of a replay attack in the stack.
Key phrases: denial of service, replay
CVE-2021-37605: In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.
CVE-2021-37606: Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two messages, as demonstrated by an attack against a long-running web service that allows the attacker to infer collisions by measuring timing differences.
Key phrases: infer collisions by measuring timing differences, key recovery
CVE-2021-37608: Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz allows an attacker to execute remote commands. This issue affects Apache OFBiz version 17.12.07 and prior versions. Upgrade to at least 17.12.08 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12297.
Key phrases: execute remote commands, unrestricted upload of file with dangerous type
CVE-2021-3761: Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network (for example AS 13335 - Cloudflare) prior to launching a BGP hijack which during normal operations would be rejected as "RPKI invalid". Additionally, in certain deployments RTR session flapping in and of itself also could cause BGP routing churn, causing availability issues.
Key phrases: bgp hijack, rtr session flapping, availability issues
CVE-2021-37613: Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service.
Key phrases: a Denial of Service, denial of service
CVE-2021-37614: In certain Progress MOVEit Transfer versions before 2021.0.3 (aka 13.0.3), SQL injection in the MOVEit Transfer web application could allow an authenticated remote attacker to gain access to the database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, or execute SQL statements that alter or delete database elements, via crafted strings sent to unique MOVEit Transfer transaction types. The fixed versions are 2019.0.7 (11.0.7), 2019.1.6 (11.1.6), 2019.2.3 (11.2.3), 2020.0.6 (12.0.6), 2020.1.5 (12.1.5), and 2021.0.3 (13.0.3).
Key phrases: gain access, gain access to the database, sql injection
CVE-2021-37615: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when printing the interpreted (translated) data, which is a less frequently used Exiv2 operation that requires an extra command line option (`-p t` or `-P t`). The bug is fixed in version v0.27.5.
Key phrases: null pointer dereference, denial of service
CVE-2021-37616: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when printing the interpreted (translated) data, which is a less frequently used Exiv2 operation that requires an extra command line option (`-p t` or `-P t`). The bug is fixed in version v0.27.5.
Key phrases: null pointer dereference, denial of service