diff --git a/2021/1xxx/CVE-2021-1416.json b/2021/1xxx/CVE-2021-1416.json index 0d9e5ba42e7..9984c28ba8f 100644 --- a/2021/1xxx/CVE-2021-1416.json +++ b/2021/1xxx/CVE-2021-1416.json @@ -36,7 +36,7 @@ "description_data": [ { "lang": "eng", - "value": "Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sensitive data. An attacker with read-only administrator access to the Admin portal could exploit these vulnerabilities by browsing to one of the pages that contains sensitive data. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system. For more information about these vulnerabilities, see the Details section of this advisory. " + "value": "Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sensitive data. An attacker with read-only administrator access to the Admin portal could exploit these vulnerabilities by browsing to one of the pages that contains sensitive data. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system. For more information about these vulnerabilities, see the Details section of this advisory." } ] }, @@ -87,4 +87,4 @@ ], "discovery": "INTERNAL" } -} +} \ No newline at end of file diff --git a/2021/26xxx/CVE-2021-26559.json b/2021/26xxx/CVE-2021-26559.json index 5c5ab1af6ee..0f03a154a66 100644 --- a/2021/26xxx/CVE-2021-26559.json +++ b/2021/26xxx/CVE-2021-26559.json @@ -69,6 +69,16 @@ "refsource": "MISC", "url": "https://lists.apache.org/thread.html/r3b3787700279ec361308cbefb7c2cce2acb26891a12ce864e4a13c8d%40%3Cusers.airflow.apache.org%3E", "name": "https://lists.apache.org/thread.html/r3b3787700279ec361308cbefb7c2cce2acb26891a12ce864e4a13c8d%40%3Cusers.airflow.apache.org%3E" + }, + { + "refsource": "MLIST", + "name": "[oss-security] 20210217 CVE-2021-26559: Apache Airflow 2.0.0: CWE-284 Improper Access Control on Configurations Endpoint for the Stable API", + "url": "http://www.openwall.com/lists/oss-security/2021/02/17/1" + }, + { + "refsource": "MLIST", + "name": "[announce] 20210217 CVE-2021-26559: Apache Airflow: CWE-284 Privilege Escalation Attack", + "url": "https://lists.apache.org/thread.html/rd142565996d7ee847b9c14b8a9921dcf80bc6bc160e3d9dca6dfc2f8@%3Cannounce.apache.org%3E" } ] }, diff --git a/2021/26xxx/CVE-2021-26697.json b/2021/26xxx/CVE-2021-26697.json index 61acd45f126..e7054c27efb 100644 --- a/2021/26xxx/CVE-2021-26697.json +++ b/2021/26xxx/CVE-2021-26697.json @@ -69,6 +69,26 @@ "refsource": "MISC", "url": "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cusers.airflow.apache.org%3E", "name": "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cusers.airflow.apache.org%3E" + }, + { + "refsource": "MLIST", + "name": "[oss-security] 20210217 CVE-2021-26697: Apache Airflow: Lineage API endpoint for Experimental API missed authentication check", + "url": "http://www.openwall.com/lists/oss-security/2021/02/17/2" + }, + { + "refsource": "MLIST", + "name": "[airflow-dev] 20210217 CVE-2021-26697: Apache Airflow: Lineage API endpoint for Experimental API missed authentication check", + "url": "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519@%3Cdev.airflow.apache.org%3E" + }, + { + "refsource": "MLIST", + "name": "[airflow-users] 20210217 CVE-2021-26697: Apache Airflow: Lineage API endpoint for Experimental API missed authentication check", + "url": "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519@%3Cusers.airflow.apache.org%3E" + }, + { + "refsource": "MLIST", + "name": "[announce] 20210217 CVE-2021-26697: Apache Airflow: Lineage API endpoint for Experimental API missed authentication check", + "url": "https://lists.apache.org/thread.html/r36111262a59219a3e2704c71e97cf84937dae5ba7a1da99499e5d8f9@%3Cannounce.apache.org%3E" } ] }, diff --git a/2021/27xxx/CVE-2021-27224.json b/2021/27xxx/CVE-2021-27224.json index c962727bd49..08ef7a5af45 100644 --- a/2021/27xxx/CVE-2021-27224.json +++ b/2021/27xxx/CVE-2021-27224.json @@ -61,6 +61,11 @@ "url": "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-irfanview-wpg/", "refsource": "MISC", "name": "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-irfanview-wpg/" + }, + { + "refsource": "MISC", + "name": "http://packetstormsecurity.com/files/161449/IrfanView-4.57-Denial-Of-Service-Code-Execution.html", + "url": "http://packetstormsecurity.com/files/161449/IrfanView-4.57-Denial-Of-Service-Code-Execution.html" } ] }