TQRG/raw-osv-data huggingface dataset:
Vulnerability: GHSA-jp7f-grcv-6mjf
Summary: Partial path traversal in sharpcompress
Aliases: CVE-2021-39208
Severity: MODERATE
CWE: CWE-22
Published: 2021-09-20T19:53:42Z

SharpCompress recreates a hierarchy of directories under destinationDirectory if ExtractFullPath is set to true in options. In order to prevent extraction outside the destination directory the destinationFileName path is verified to begin with fullDestinationDirectoryPath. However it is not enforced that fullDestinationDirectoryPath ends with slash:

```csharp
public static void WriteEntryToDirectory(IEntry entry,
                                         string destinationDirectory,
                                         ExtractionOptions? options,
                                         Action<string, ExtractionOptions?> write)
{
    string destinationFileName;
    string file = Path.GetFileName(entry.Key);
    string fullDestinationDirectoryPath = Path.GetFullPath(destinationDirectory);
...
        throw new ExtractionException("Entry is trying to write a file outside of the destination directory.");
}
```

If the destinationDirectory is not slash terminated like /home/user/dir it is possible to create a file with a name thats begins as the destination directory one level up from the directory, i.e. /home/user/dir.sh.

#### Impact
Because of the file name and destination directory constraints the arbitrary file creation impact is limited and depends on the use case.
Vulnerability: GHSA-h23m-w6x5-jwr4
Summary: Out-of-bounds write
Aliases: CVE-2019-0923
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:08Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-prxj-c66c-4gcf
Summary: Out-of-bounds write
Aliases: CVE-2019-0924
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:12Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-6r92-cgxc-r5fg
Summary: Denial of service in CBOR library
Severity: HIGH
CWE: CWE-407
Published: 2022-01-21T23:35:35Z

### Impact
Due to this library's use of an inefficient algorithm, it is vulnerable to a denial of service attack when a maliciously crafted input is passed to `DecodeFromBytes` or other CBOR decoding mechanisms in this library.

Affected versions _include_ versions 4.0.0 through 4.5.0.

This vulnerability was privately reported to me.

### Patches
This issue has been fixed in version 4.5.1.  Users should use the latest version of this library. (The latest version is not necessarily 4.5.1.  Check the [NuGet page](https://www.nuget.org/packages/PeterO.Cbor) to see the latest version's version number.)

### Workarounds

Again, users should use the latest version of this library.

In the meantime, note that the inputs affected by this issue are all CBOR maps or contain CBOR maps.  An input that decodes to a single CBOR object is not capable of containing a CBOR map if&mdash;

- it begins with a byte other than 0x80 through 0xDF, or
- it does not contain a byte in the range 0xa0 through 0xBF.

Such an input is not affected by this vulnerability and an application can choose to perform this check before passing it to a CBOR decoding mechanism.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [the CBOR repository](https://github.com/peteroupc/CBOR).
Vulnerability: GHSA-j8f4-2w4p-mhjc
Summary: Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
Aliases: CVE-2017-0256
Severity: MODERATE
CWE: CWE-20
Published: 2018-10-16T19:57:48Z

A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
Vulnerability: GHSA-v89p-5hr2-4rh4
Summary: Out-of-bounds write
Aliases: CVE-2019-1197
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:56:15Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131, CVE-2019-1139, CVE-2019-1140, CVE-2019-1141, CVE-2019-1195, CVE-2019-1196.
Vulnerability: GHSA-gcx5-3p5f-f8vp
Summary: Prototype Pollution in jquery.cookie
Aliases: CVE-2022-23395
Severity: MODERATE
CWE: CWE-1321
Published: 2022-03-03T00:00:51Z

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).
Vulnerability: GHSA-5q7q-qqw2-hjq7
Summary: Cross-Site Scripting in AjaxNetProfessional
Aliases: CVE-2021-43853
Severity: HIGH
CWE: CWE-79
Published: 2022-01-06T18:32:24Z

### Overview

Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary JavaScript objects.

### Description

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.

XSS effects vary in range from petty nuisance to significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner network.

### Releases

Releases before version 21.12.22.1 are affected. Please be careful to download any binary DLL from other web sites, especially we found NuGet packages not owned by us that contain vulnerable versions.

### Workarounds

A workaround exists that replaces one of the core JavaScript files embedded in the library. Using a XML configuration allows to replace the default JavaScript code to be replaced with the version on GitHub.

```xml
<configuration>
	<configSections>
		<sectionGroup name="ajaxNet">
			<section name="ajaxSettings" type="AjaxPro.AjaxSettingsSectionHandler,AjaxPro.2" requirePermission="false" restartOnExternalChanges="true"/>
		</sectionGroup>
	</configSections>
	<ajaxNet>
		<ajaxSettings>
			<coreScript>~/ajaxpro-core-fixed.js</coreScript>
		</ajaxSettings>
	</ajaxNet>
</configuration>
```

Copy the file core.js from the main project folder to your web server root folder and rename that ajaxpro-core-fixed.js.

Clients need to refresh the web page to download the changed JavaScript code.

### References

Commit fixing the issue: c89e39b9679fcb8ab6644fe21cc7e652cb615e2b

Note: the official Ajax.NET Professional (AjaxPro) NuGet package is available here: https://www.nuget.org/packages/AjaxNetProfessional/

### For more information

If you have any questions or comments about this advisory:
* Open an issue on this GitHub repository
Vulnerability: GHSA-8gvg-8vhf-h26g
Summary: Out-of-bounds write
Aliases: CVE-2019-0937
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:03Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933.
Vulnerability: GHSA-5c66-x4wm-rjfx
Summary: Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN)
Aliases: CVE-2016-7119
Severity: MODERATE
CWE: CWE-79
Published: 2018-10-16T19:34:10Z

Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element.
Vulnerability: GHSA-8qh8-cv77-h83g
Summary: High severity vulnerability that affects Microsoft.ChakraCore
Aliases: CVE-2019-0769
Severity: HIGH
CWE: CWE-787
Published: 2019-04-09T19:43:46Z

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
Vulnerability: GHSA-rx34-jff5-ph35
Summary: Out-of-bounds write
Aliases: CVE-2019-0917
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:06Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-c8qc-62qv-5p2x
Summary: Out-of-bounds Write in ChakraCore
Aliases: CVE-2020-0828
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:58:22Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-h595-8pw6-5q6v
Summary: Inadequate Encryption Strength in DotNetNuke
Aliases: CVE-2018-15811
Severity: HIGH
CWE: CWE-326
Published: 2019-07-05T21:08:36Z

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
Vulnerability: GHSA-782p-53wq-cxmj
Summary: High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
Aliases: CVE-2018-12086
Severity: HIGH
CWE: CWE-787
Published: 2018-10-16T19:51:31Z

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
Vulnerability: GHSA-jvjp-vh27-r9h5
Summary: Cross-site Scripting in PiranhaCMS
Aliases: CVE-2021-25977
Severity: MODERATE
CWE: CWE-79
Published: 2021-10-27T18:53:03Z

In PiranhaCMS, versions 7.0.0 to 9.1.1 are vulnerable to stored XSS due to the page title improperly sanitized. By creating a page with a specially crafted page title, a low privileged user can trigger arbitrary JavaScript execution.
Vulnerability: GHSA-c9cg-q8r2-xvjq
Summary: Improper Authentication in Auth0.AuthenticationApi
Aliases: CVE-2019-16929
Severity: HIGH
CWE: CWE-287
Published: 2019-10-24T20:56:12Z

Auth0 auth0.net before 6.5.4 has Incorrect Access Control because IdentityTokenValidator can be accidentally used to validate untrusted ID tokens.
Vulnerability: GHSA-mw7r-3g6w-85qg
Summary: Out-of-bounds write
Aliases: CVE-2019-1131
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:46Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1139, CVE-2019-1140, CVE-2019-1141, CVE-2019-1195, CVE-2019-1196, CVE-2019-1197.
Vulnerability: GHSA-2rfj-2mwp-787v
Summary: Out-of-bounds write
Aliases: CVE-2019-0993
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:51Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989, CVE-2019-0991, CVE-2019-0992, CVE-2019-1002, CVE-2019-1003, CVE-2019-1024, CVE-2019-1051, CVE-2019-1052.
Vulnerability: GHSA-vhvh-528q-ff3p
Summary: Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated
Aliases: CVE-2018-8171
Severity: HIGH
CWE: CWE-287
Published: 2018-10-16T19:56:50Z

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.
Vulnerability: GHSA-pjpj-f6r8-56rm
Summary: High severity vulnerability that affects Microsoft.ChakraCore
Aliases: CVE-2019-0609
Severity: HIGH
CWE: CWE-787
Published: 2019-04-09T19:43:59Z

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
Vulnerability: GHSA-pwpr-vp2v-99xw
Summary: Out-of-bounds write
Aliases: CVE-2019-1138
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:56:11Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1217, CVE-2019-1237, CVE-2019-1298, CVE-2019-1300.
Vulnerability: GHSA-q99r-j969-6jwr
Summary: Out-of-bounds write
Aliases: CVE-2019-1237
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:56:04Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1298, CVE-2019-1300.
Vulnerability: GHSA-2qgv-2cv4-g4cg
Summary: Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0832
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:57:27Z

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-8pp6-8x4q-c5mx
Summary: Server side request forgery in C1 CMS
Aliases: CVE-2022-24789
Severity: HIGH
CWE: CWE-918
Published: 2022-03-30T00:00:31Z

C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist.
Vulnerability: GHSA-8m73-w2r2-6xxj
Summary: Insecure defaults in UmbracoForms
Aliases: CVE-2020-7685
Severity: HIGH
CWE: CWE-1188
Published: 2020-07-29T17:29:51Z

This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies.
Vulnerability: GHSA-958r-g534-ccmr
Summary: Moderate severity vulnerability that affects MadsKristensen.AspNetCore.Miniblog
Aliases: CVE-2019-9845
Severity: CRITICAL
CWE: CWE-20
Published: 2019-07-05T21:11:13Z

madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension.
Vulnerability: GHSA-6xh7-4v2w-36q6
Summary: ASP.NET Core fails to properly validate web requests
Aliases: CVE-2017-0247
Severity: HIGH
CWE: CWE-20
Published: 2018-10-16T19:58:05Z

A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to cause a denial of service by leveraging failure to properly calculate the length of 4-byte characters in the Unicode Non-Character range.
Vulnerability: GHSA-vw2g-5827-m9fp
Summary: Out-of-bounds write
Aliases: CVE-2019-1308
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:55:52Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1335, CVE-2019-1366.
Vulnerability: GHSA-qwwr-qc2p-6283
Summary: Out-of-bounds write in libpng
Aliases: CVE-2018-14550
Severity: HIGH
CWE: CWE-787
Published: 2021-03-22T16:57:07Z

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
Vulnerability: GHSA-9824-rp6m-xx9w
Summary: Out-of-bounds write
Aliases: CVE-2019-0989
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:04Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0991, CVE-2019-0992, CVE-2019-0993, CVE-2019-1002, CVE-2019-1003, CVE-2019-1024, CVE-2019-1051, CVE-2019-1052.
Vulnerability: GHSA-x7fx-mcc9-27j7
Summary: Inappropriate implementation in V8 in CefSharp
Aliases: CVE-2020-16013
Severity: HIGH
CWE: CWE-787, CWE-119
Published: 2020-11-27T20:12:55Z

High CVE-2020-16013: Inappropriate implementation in V8. 

- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16013

Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.

There is currently little to no public information on the issue other than it has been flagged as `High` severity.
Vulnerability: GHSA-qxx8-292g-2w66
Summary: Improper Authentication
Severity: HIGH
CWE: CWE-287
Published: 2021-03-08T15:50:01Z

### Impact
A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot.

### Patches
The problem has been patched in all affected versions. Please see the list of patched versions for the most appropriate one for your individual case.

### Workarounds
Users who do not wish or are not able to upgrade can add an authentication configuration containing ClaimsValidator which throws an exception if the Claims are Skill Claims.

For detailed instructions, see the link in the References section.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [Microsoft Bot Builder SDK](https://github.com/microsoft/botbuilder-dotnet)
* Email us at [bf-reports@microsoft.com](mailto:bf-reports@microsoft.com)
Vulnerability: GHSA-2cwj-8chv-9pp9
Summary: XML External Entity attack in log4net
Aliases: CVE-2018-1285
Severity: CRITICAL
CWE: CWE-611
Published: 2021-01-29T19:47:23Z

Apache log4net before 2.0.10 does not disable XML external entities when parsing log4net configuration files. This could allow for XXE-based attacks in applications that accept arbitrary configuration files from users.
Vulnerability: GHSA-9475-xg6m-j7pw
Summary: Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET
Aliases: CVE-2020-5268
Severity: MODERATE
CWE: CWE-303
Published: 2020-04-22T20:59:37Z

### Impact
Saml2 tokens are usually used as bearer tokens - a caller that presents a token is assumed to be the subject of the token. There is also support in the Saml2 protocol for issuing tokens that is tied to a subject through other means, e.g. holder-of-key where possession of a private key must be proved.
The Sustainsys.Saml2 library incorrectly treats all incoming tokens as bearer tokens, even though they have another subject confirmation method specified. This could be used by an attacker that could get access to Saml2 tokens with another subject confirmation method than bearer. The attacker could then use such a tocken to create a log in session.

### Patches
Version 1.0.2 and 2.7.0 are patched.

### Workarounds
Ensure that any IdentityProvider trusted by the Sustainsys.Saml2 SP only issues bearer tokens if the audience matches the Sustainsys.Saml2 SP.

### For more information
If you have any questions or comments about this advisory:
* Comment on #103
* Email us at security@sustainsys.com if you think that there are further security issues.
Vulnerability: GHSA-jv2c-mhcq-6wp4
Summary: Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0829
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:57:39Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-874w-m2v2-mj64
Summary: Double Free in Adplug
Aliases: CVE-2019-15151
Severity: CRITICAL
CWE: CWE-415
Published: 2021-03-29T20:48:45Z

AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
Vulnerability: GHSA-m22m-h4rf-pwq3
Summary: Path Traversal in SharpZipLib
Aliases: CVE-2021-32840
Severity: HIGH
CWE: CWE-22
Published: 2022-02-01T16:22:50Z

SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in the parent directory of `destFolder`. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3.
Vulnerability: GHSA-jrmq-rv9w-63rv
Summary: Umbraco ApplicationURL Overwrite
Aliases: CVE-2022-22690
Severity: HIGH
CWE: CWE-444
Published: 2022-01-21T23:34:24Z

Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" (or just "ApplicationUrl") is used whenever application code needs to build a URL pointing back to the site. For example, when a user resets their password and the application builds a password reset URL or when the administrator invites users to the site. For Umbraco versions less than 9.2.0, if the Application URL is not specifically configured, the attacker can manipulate this value and store it persistently affecting all users for components where the "UmbracoApplicationUrl" is used. For example, the attacker is able to change the URL users receive when resetting their password so that it points to the attackers server, when the user follows this link the reset token can be intercepted by the attacker resulting in account takeover.
Vulnerability: GHSA-xpwp-rq3x-x6v7
Summary: Critical severity vulnerability that affects recurly-api-client
Aliases: CVE-2017-0907
Severity: CRITICAL
CWE: CWE-918
Published: 2018-10-16T17:35:04Z

The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources.
Vulnerability: GHSA-wmpm-fq7r-jq56
Summary: Imporoper path validation in elFinder.NetCore
Aliases: CVE-2021-23427
Severity: HIGH
CWE: CWE-20
Published: 2021-09-02T22:05:17Z

This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficient validation.
Vulnerability: GHSA-365p-96qv-xr7g
Summary: ASP.NET Core allow an elevation of privilege
Aliases: CVE-2018-0787
Severity: HIGH
CWE: CWE-640
Published: 2018-10-16T19:56:59Z

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".
Vulnerability: GHSA-cmhx-cq75-c4mj
Summary: Regular Expression Denial of Service (ReDoS)
Aliases: CVE-2019-0820
Severity: MODERATE
CWE: CWE-400
Published: 2021-08-04T21:03:46Z

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.
Vulnerability: GHSA-9cxh-gqpx-qc5m
Summary: Credential Disclosure in System.DirectoryServices.Protocols
Aliases: CVE-2021-41355
Severity: MODERATE
CWE: CWE-200
Published: 2021-10-12T17:49:25Z

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A Information Disclosure vulnerability exists in .NET where System.DirectoryServices.Protocols.LdapConnection may send credentials in plain text on Linux.

### Patches
Any .NET application that uses `System.DirectoryServices.Protocols` with a vulnerable version listed below on system based on Linux.

Package name | Vulnerable versions | Secure versions
------------ | ---------------- | -------------------------
System.DirectoryServices.Protocols | 5.0.0  | 5.0.1

### Other Details

- Announcement for this issue can be found at dotnet/announcements#202
- An Issue for this can be found at https://github.com/dotnet/runtime/issues/60301
- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-41355
Vulnerability: GHSA-fvpg-qx3g-7mp7
Summary: High severity vulnerability that affects Microsoft.ChakraCore
Aliases: CVE-2019-0771
Severity: HIGH
CWE: CWE-787
Published: 2019-04-09T19:43:29Z

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0773, CVE-2019-0783.
Vulnerability: GHSA-grvw-q343-58wh
Summary: Out-of-bounds write
Aliases: CVE-2019-1300
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:55:57Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1237, CVE-2019-1298.
Vulnerability: GHSA-4vp3-vfww-8648
Summary: Incorrect permission enforcement in UmbracoCms
Aliases: CVE-2020-29454
Severity: MODERATE
CWE: CWE-732
Published: 2021-04-13T15:48:05Z

Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access.
Vulnerability: GHSA-xxfr-jrgh-x392
Summary: Remote code execution in ChakraCore
Aliases: CVE-2020-1172
Severity: HIGH
CWE: CWE-787
Published: 2021-08-02T17:29:01Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1057, CVE-2020-1180.
Vulnerability: GHSA-v5rv-hpxg-8x49
Summary: Signature validation bypass in ServiceStack
Aliases: CVE-2020-28042
Severity: MODERATE
CWE: CWE-347
Published: 2021-01-13T19:13:11Z

ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.
Vulnerability: GHSA-5rcr-q3rx-j7vr
Summary: Out-of-bounds write
Aliases: CVE-2019-1107
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:35Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1106.
Vulnerability: GHSA-3w9q-c44j-37jj
Summary: High severity vulnerability that affects Microsoft.ChakraCore
Aliases: CVE-2019-0773
Severity: HIGH
CWE: CWE-787
Published: 2019-04-09T19:43:32Z

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0783.
Vulnerability: GHSA-gvqv-779r-4jgp
Summary: Use after free in CefSharp
Aliases: CVE-2020-16017
Severity: HIGH
CWE: CWE-416
Published: 2020-11-27T20:13:05Z

CVE-2020-16017: Use after free in site isolation

- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16017

Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.

There is currently little to no public information on the issue other than it has been flagged as `High` severity.
Vulnerability: GHSA-hrmm-f4j8-8vxc
Summary: Out-of-bounds write
Aliases: CVE-2019-0922
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:11Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-ghhp-997w-qr28
Summary: .NET Core Remote Code Execution Vulnerability
Aliases: CVE-2021-26701
Severity: CRITICAL
Published: 2021-04-21T19:38:01Z

.NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112.

### Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1, and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A remote code execution vulnerability exists in .NET 5 and .NET Core due to how text encoding is performed.

### Discussion

Discussion for this issue can be found at dotnet/runtime#49377

### Mitigation factors

Microsoft has not identified any mitigating factors for this vulnerability.

### Affected software

The vulnerable package is `System.Text.Encodings.Web` . Upgrading your package and redeploying your app should be sufficient to address this vulnerability.

Vulnerable package versions:

Any .NET 5, .NET Core, or .NET Framework based application that uses the System.Text.Encodings.Web package with a vulnerable version listed below.

Package Name | Vulnerable Versions | Secure Versions
-|-|-
System.Text.Encodings.Web | 4.0.0 - 4.5.0 | 4.5.1
System.Text.Encodings.Web |  4.6.0-4.7.1 | 4.7.2
System.Text.Encodings.Web | 5.0.0 |  5.0.1


Please validate that each of the .NET versions you are using is in support. Security updates are only provided for supported .NET versions.
Vulnerability: GHSA-7rq6-7gv8-c37h
Summary: Missing Authorization with Default Settings in Dashboard UI
Aliases: CVE-2021-41238
Severity: HIGH
CWE: CWE-862
Published: 2021-11-03T17:30:59Z

Dashboard UI in Hangfire.Core uses authorization filters to protect it from showing sensitive data to unauthorized users. By default when no custom authorization filters specified, `LocalRequestsOnlyAuthorizationFilter` filter is being used to allow only local requests and prohibit all the remote requests to provide sensible, protected by default settings.

However due to the recent changes, in version 1.7.25 no authorization filters are used by default, allowing remote requests to succeed.

### Impact

Missing authorization when default options are used for the Dashboard UI, e.g. when no custom authorization rules are used as recommended in the [Using Dashboard](https://docs.hangfire.io/en/latest/configuration/using-dashboard.html#configuring-authorization) documentation article. 

#### Impacted

If you are using `UseHangfireDashboard` method with default `DashboardOptions.Authorization` property value, then your installation is impacted:

```csharp
app.UseHangfireDashboard(); // Impacted
app.UseHangfireDashboard("/hangfire", new DashboardOptions()); // Impacted
```

#### Not Impacted

If any other authorization filter is specified in the `DashboardOptions.Authorization` property, the you are not impacted:

```csharp
app.UseHangfireDashboard("/hangfire", new DashboardOptions
{
    Authorization = new []{ new SomeAuthorizationFilter(); } // Not impacted
});
```

### Patches

Patch is already available in version [1.7.26](https://github.com/HangfireIO/Hangfire/releases/tag/v1.7.26) and already available on NuGet.org, please see [Hangfire.Core 1.7.26](https://www.nuget.org/packages/Hangfire.Core/1.7.26). Default authorization rules now prohibit remote requests by default again by including the `LocalRequestsOnlyAuthorizationFilter` filter to the default settings. Please upgrade to the newest version in order to mitigate the issue.

### Workarounds

It is possible to fix the issue by using the `LocalRequestsOnlyAuthorizationFilter` explicitly when configuring the Dashboard UI. In this case upgrade is not required.

```csharp
// using Hangfire.Dashboard;

app.UseHangfireDashboard("/hangfire", new DashboardOptions
{
    Authorization = new []{ new LocalRequestsOnlyAuthorizationFilter(); }
});
```

### References

Original GitHub Issue: https://github.com/HangfireIO/Hangfire/issues/1958
Vulnerability: GHSA-6j89-jhpr-849f
Summary: Out-of-bounds write
Aliases: CVE-2019-1307
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:55:46Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1308, CVE-2019-1335, CVE-2019-1366.
Vulnerability: GHSA-7jgj-8wvc-jh57
Summary: .NET Core Information Disclosure
Aliases: CVE-2018-8292
Severity: HIGH
CWE: CWE-200
Published: 2021-04-21T19:16:06Z

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.
Vulnerability: GHSA-9rjp-r58j-fxgq
Summary: Path traversal in elFinder.NetCore
Aliases: CVE-2021-23428
Severity: HIGH
CWE: CWE-20, CWE-22
Published: 2021-09-02T22:05:26Z

This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file path. Due to missing sanitation of the user input and a missing check of the generated path its possible to escape the Files directory via path traversal
Vulnerability: GHSA-ppxc-pmx9-qjv9
Summary: Out-of-bounds write
Aliases: CVE-2019-1195
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:59Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131, CVE-2019-1139, CVE-2019-1140, CVE-2019-1141, CVE-2019-1196, CVE-2019-1197.
Vulnerability: GHSA-cwqq-w8c3-r2jw
Summary: Uncontrolled Resource Consumption in MetadataExtractor
Aliases: CVE-2019-14262
Severity: HIGH
CWE: CWE-400
Published: 2019-08-23T00:04:56Z

MetadataExtractor 2.1.0 allows stack consumption.
Vulnerability: GHSA-qwwg-gc55-qqrv
Summary: Out-of-bounds Write in Chakra
Aliases: CVE-2020-17131
Severity: HIGH
CWE: CWE-787
Published: 2021-04-13T15:54:40Z

Chakra Scripting Engine Memory Corruption Vulnerability
Vulnerability: GHSA-7423-5qfm-g648
Summary: Out-of-bounds write
Aliases: CVE-2019-0916
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:09Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-2x7h-96h5-rq84
Summary: Path Traversal in SharpZipLib
Aliases: CVE-2021-32841
Severity: MODERATE
CWE: CWE-22
Published: 2022-02-01T16:22:57Z

SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is under destination directory. However, it is not enforced that `destDir` ends with slash. If the `destDir` is not slash terminated like `/home/user/dir` it is possible to create a file with a name thats begins with the destination directory, i.e. `/home/user/dir.sh`. Because of the file name and destination directory constraints, the arbitrary file creation impact is limited and depends on the use case. Version 1.3.3 contains a patch for this vulnerability.
Vulnerability: GHSA-qpvx-gpqm-g98j
Summary: Critical severity vulnerability that affects Auth0-WCF-Service-JWT
Aliases: CVE-2019-7644
Severity: CRITICAL
CWE: CWE-209
Published: 2019-04-18T14:28:03Z

Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker, they can forge an arbitrary JWT token that will be accepted by the vulnerable application.
Vulnerability: GHSA-jhx3-2w5x-x39x
Summary: High severity vulnerability that affects Microsoft.ChakraCore
Aliases: CVE-2019-0746
Severity: MODERATE
Published: 2019-04-09T19:43:38Z

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
Vulnerability: GHSA-cgpw-2gph-2r9g
Summary: Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core
Severity: MODERATE
Published: 2018-10-16T19:59:59Z

Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack.

The update addresses the vulnerability by correcting how ASP.NET Core handles such requests.
Vulnerability: GHSA-g8j6-m4p7-5rfq
Summary: High severity vulnerability that affects DotNetNuke.Core
Aliases: CVE-2017-0929
Severity: HIGH
CWE: CWE-918
Published: 2018-10-16T17:18:12Z

DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.
Vulnerability: GHSA-rh4p-g7x6-8pqg
Summary: Out-of-bounds write
Aliases: CVE-2019-1062
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:09Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1092, CVE-2019-1103, CVE-2019-1106, CVE-2019-1107.
Vulnerability: GHSA-9qw8-ccq9-ffj9
Summary: Out-of-bounds write
Aliases: CVE-2019-1139
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:53Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131, CVE-2019-1140, CVE-2019-1141, CVE-2019-1195, CVE-2019-1196, CVE-2019-1197.
Vulnerability: GHSA-mv2r-q4g5-j8q5
Summary: Microsoft.Data.OData Library improperly handles web requests
Aliases: CVE-2018-8269
Severity: HIGH
Published: 2018-10-16T19:58:31Z

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
Vulnerability: GHSA-868x-rg4c-cjqg
Summary: Allocation of Resources Without Limits or Throttling in Apache Avro
Aliases: CVE-2021-43045
Severity: HIGH
CWE: CWE-770
Published: 2022-01-08T00:39:20Z

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this issue.
Vulnerability: GHSA-v76m-f5cx-8rg4
Summary: Moderate severity vulnerability that affects DotNetNuke.Core
Aliases: CVE-2015-1566
Severity: MODERATE
CWE: CWE-79
Published: 2018-10-16T19:33:25Z

Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability: GHSA-w89r-qch4-8jv5
Summary: Out-of-bounds write
Aliases: CVE-2019-0912
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:59Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-2x75-mf24-588m
Summary: Out-of-bounds write
Aliases: CVE-2019-1092
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:11Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1103, CVE-2019-1106, CVE-2019-1107.
Vulnerability: GHSA-6cc6-66f5-mxjj
Summary: Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0826
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:58:03Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-j3jw-j2j8-2wv9
Summary: Improper Verification of Cryptographic Signature in starkbank-ecdsa
Aliases: CVE-2021-43569
Severity: CRITICAL
CWE: CWE-347
Published: 2021-11-10T20:58:03Z

The verify function in the Stark Bank .NET ECDSA library (ecdsa-dotnet) 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.
Vulnerability: GHSA-86gw-g9jv-8vfg
Summary:  Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0833
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:57:55Z

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0848.
Vulnerability: GHSA-m7mf-48hp-5qmr
Summary: Inappropriate implementation in V8
Aliases: CVE-2020-16009
Severity: HIGH
CWE: CWE-787
Published: 2020-12-02T18:28:47Z

CVE-2020-16009: Inappropriate implementation in V8

- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16009

Google is aware of reports that exploits for CVE-2020-16009 exist in the wild.

Allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

There is currently little to no public information on the issue other than it has been flagged as `High` severity.
Vulnerability: GHSA-2452-3rwv-x89c
Summary: Out-of-bounds write
Aliases: CVE-2019-1298
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:56:01Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1217, CVE-2019-1237, CVE-2019-1300.
Vulnerability: GHSA-hfvc-g252-rp4g
Summary: Denial of Service in i18n
Aliases: CVE-2020-7791
Severity: MODERATE
CWE: CWE-400, CWE-20
Published: 2020-12-14T19:50:22Z

This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.
Vulnerability: GHSA-6w5m-jgc5-8cgc
Summary: orchardcore is vulnerable to Cross-site Scripting
Aliases: CVE-2022-0159
Severity: MODERATE
CWE: CWE-79
Published: 2022-01-21T23:57:49Z

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerability: GHSA-ch6p-4jcm-h8vh
Summary: Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core
Aliases: CVE-2017-0248
Severity: MODERATE
CWE: CWE-295
Published: 2018-10-16T19:58:52Z

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."
Vulnerability: GHSA-x2rg-fmcv-crq5
Summary: DNN (aka DotNetNuke) has Remote Code Execution via a cookie
Aliases: CVE-2017-9822
Severity: HIGH
CWE: CWE-20
Published: 2018-10-16T19:34:22Z

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
Vulnerability: GHSA-2wwc-w2gw-4329
Summary: Out-of-bounds write
Aliases: CVE-2019-1366
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:55:36Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1335.
Vulnerability: GHSA-rqrc-8q8f-cp9c
Summary: Infinite loop in .Net Bond
Aliases: CVE-2020-1469
Severity: HIGH
CWE: CWE-434, CWE-835
Published: 2022-04-08T18:11:51Z

A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial of Service Vulnerability'. Handling of large container lengths that could cause an infinite loop when deserializing some payloads.
Vulnerability: GHSA-7378-6268-4278
Summary: High severity vulnerability that affects DotNetZip
Aliases: CVE-2018-1002205
Severity: HIGH
CWE: CWE-22
Published: 2018-10-16T17:16:40Z

DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.