TQRG/raw-osv-data huggingface dataset:
Vulnerability: GHSA-xhv5-w9c5-2r2w
Summary: Unbounded connection acceptance in http4s-blaze-server
Aliases: CVE-2021-21294
Severity: HIGH
CWE: CWE-400
Published: 2021-02-02T21:42:56Z

### Impact

blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its selector pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an unbounded queue. Each connection allocates a socket handle, which drains a scarce OS resource. This can also confound higher level circuit breakers which work based on detecting failed connections.

http4s provides a general `MaxActiveRequests` middleware mechanism for limiting open connections, but it is enforced inside the Blaze accept loop, after the connection is accepted and the socket opened. Thus, the limit only prevents the number of connections which can be simultaneously processed, not the number of connections which can be held open.

### Patches

In 0.21.18, 0.22.0-M3, and 1.0.0-M16, a new`maxConnections` property, with a default value of 1024, has been added to the `BlazeServerBuilder`.  Setting the value to a negative number restores unbounded behavior, but is strongly disrecommended.  

The NIO2 backend does not respect `maxConnections`.  Its use is now deprecated in http4s-0.21, and the option is removed altogether starting in http4s-0.22.

The connections are bounded in 0.21.17, 0.22.0-M2, and 1.0.0-M14, but the `maxConnections` parameter was passed incorrectly, making it impossible to change the Blaze default of 512. 

### Workarounds
* An Nginx side-car acting as a reverse proxy for the local http4s-blaze-server instance would be able to apply a connection limiting semantic before the sockets reach blaze-core. Nginx’s connection bounding is both asynchronous and properly respects backpressure.
* http4s-ember-server is an alternative to http4s-blaze-server, but does not yet have HTTP/2 or web socket support.  Its performance in terms of RPS is appreciably behind Blaze’s, and as the newest backend, has substantially less industrial uptake.
* http4s-jetty is an alternative to http4s-blaze-server, but does not yet have web socket support.  Its performance in terms of requests per second is somewhat behind Blaze’s, and despite Jetty's industrial adoption, the http4s integration has substantially less industrial uptake.
* http4s-tomcat is an alternative to http4s-blaze-server, but does not yet have HTTP/2 web socket support.  Its performance in terms of requests per second is somewhat behind Blaze’s, and despite Jetty's industrial adoption, the http4s integration has substantially less industrial uptake.

### References

See [the Blaze GHSA](https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc) for more on the underlying issue.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [http4s/http4s](http://github.com/http4s/http4s)
* Contact us according to the [http4s security policy](https://github.com/http4s/http4s/security/policy)
Vulnerability: GHSA-hph2-m3g5-xxv4
Summary: XStream is vulnerable to an Arbitrary Code Execution attack
Aliases: CVE-2021-39151
Severity: HIGH
CWE: CWE-502, CWE-434
Published: 2021-08-25T14:47:09Z

### Impact
The vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types.

### Patches
XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.

### Workarounds
See [workarounds](https://x-stream.github.io/security.html#workaround) for the different versions covering all CVEs.

### References
See full information about the nature of the vulnerability and the steps to reproduce it in XStream's documentation for [CVE-2021-39151](https://x-stream.github.io/CVE-2021-39151.html).

### Credits
Smi1e of DBAPPSecurity WEBIN Lab found and reported the issue to XStream and provided the required information to reproduce it.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [XStream](https://github.com/x-stream/xstream/issues)
* Contact us at [XStream Google Group](https://groups.google.com/group/xstream-user)
Vulnerability: GHSA-jj9h-mwhq-8vhm
Summary: Moderate severity vulnerability that affects org.apache.qpid:qpid-broker
Aliases: CVE-2016-3094
Severity: MODERATE
CWE: CWE-287, CWE-20
Published: 2018-10-16T19:50:13Z

PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.
Vulnerability: GHSA-4rm3-4mq4-mfwr
Summary: Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
Aliases: CVE-2018-20595
Severity: HIGH
CWE: CWE-352
Published: 2019-01-04T17:43:22Z

A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.
Vulnerability: GHSA-rf6r-2c4q-2vwg
Summary: jackson-databind mishandles the interaction between serialization gadgets and typing
Aliases: CVE-2020-10968
Severity: HIGH
CWE: CWE-502
Published: 2020-05-15T18:58:54Z

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
Vulnerability: GHSA-j9h8-phrw-h4fh
Summary: XStream is vulnerable to a Remote Command Execution attack
Aliases: CVE-2021-39144
Severity: HIGH
CWE: CWE-502, CWE-94
Published: 2021-08-25T14:48:19Z

### Impact
The vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types.

### Patches
XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.

### Workarounds
See [workarounds](https://x-stream.github.io/security.html#workaround) for the different versions covering all CVEs.

### References
See full information about the nature of the vulnerability and the steps to reproduce it in XStream's documentation for [CVE-2021-39144](https://x-stream.github.io/CVE-2021-39144.html).

### Credits

Ceclin and YXXX from the Tencent Security Response Center found and reported the issue to XStream and provided the required information to reproduce it.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [XStream](https://github.com/x-stream/xstream/issues)
* Email us at [XStream Google Group](https://groups.google.com/group/xstream-user)
Vulnerability: GHSA-xm6r-4466-mr74
Summary: High severity vulnerability that affects com.orientechnologies:orientdb-core
Aliases: CVE-2017-11467
Severity: CRITICAL
CWE: CWE-269
Published: 2018-10-18T17:40:56Z

OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.
Vulnerability: GHSA-334p-wv2m-w3vp
Summary: Denial of service in Apache Xerces2
Aliases: CVE-2009-2625
Severity: MODERATE
Published: 2020-06-15T18:51:30Z

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
Vulnerability: GHSA-h6wf-hvwc-fm77
Summary: Out-of-bounds write
Aliases: CVE-2019-0914
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:02Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-wvhv-rr3v-vhpj
Summary: Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0823
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:57:11Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-8336-mxp6-v5h9
Summary: Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
Aliases: CVE-2018-12087
Severity: MODERATE
CWE: CWE-295
Published: 2018-10-16T19:51:18Z

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.
Vulnerability: GHSA-4jqc-8m5r-9rpr
Summary: Prototype Pollution in set-value
Aliases: CVE-2021-23440
Severity: HIGH
CWE: CWE-843, CWE-1321
Published: 2021-09-13T20:09:36Z

This affects the package `set-value` before 2.0.1, and starting with 3.0.0 but prior to 4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.
Vulnerability: GHSA-pfrg-w49c-8432
Summary: Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0768
Severity: HIGH
CWE: CWE-787
Published: 2021-08-02T17:26:23Z

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-w32p-76xr-88pc
Summary: Out-of-bounds write
Aliases: CVE-2019-1003
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:06Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989, CVE-2019-0991, CVE-2019-0992, CVE-2019-0993, CVE-2019-1002, CVE-2019-1024, CVE-2019-1051, CVE-2019-1052.
Vulnerability: GHSA-g644-6fg4-hrh9
Summary: Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0830
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:57:47Z

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-hfm2-fffh-v47v
Summary: Out-of-bounds write
Aliases: CVE-2019-1196
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:58:01Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131, CVE-2019-1139, CVE-2019-1140, CVE-2019-1141, CVE-2019-1195, CVE-2019-1197.
Vulnerability: GHSA-hh56-x62g-gvhc
Summary: Cross-site scripting in CLEditor
Aliases: CVE-2019-1010113
Severity: MODERATE
CWE: CWE-79
Published: 2019-07-26T16:10:06Z

Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting (XSS). The impact is: An attacker might be able to inject arbitrary html and script code into the web site. The component is: jQuery plug-in. The attack vector is: the victim must open a crafted href attribute of a link (A) element.
Vulnerability: GHSA-gr4c-5rq6-cgh3
Summary: OPC UA applications can allow a remote attacker to determine a Server's private key 
Aliases: CVE-2018-7559
Severity: MODERATE
Published: 2018-10-16T19:58:42Z

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack.
Vulnerability: GHSA-8xc6-g8xw-h2c4
Summary: YARP Denial of Service Vulnerability
Aliases: CVE-2022-26924
Severity: HIGH
Published: 2022-04-22T20:23:44Z

### Impact

A denial of service vulnerability exists in how YARP processes input.

### Patches

If you're using YARP `1.0.0`, you should update to NuGet package version [`1.0.1`](https://www.nuget.org/packages/Yarp.ReverseProxy/1.0.1).
If you're using YARP `1.1.0-RC.1`, you should update to NuGet package version [`1.1.0-rc.1.22211.2`](https://www.nuget.org/packages/Yarp.ReverseProxy/1.1.0-rc.1.22211.2).

You can do so by updating the `PackageReference` in your `.csproj` file
```diff
<ItemGroup>
- <PackageReference Include="Yarp.ReverseProxy" Version="1.0.0" />
- <PackageReference Include="Yarp.Telemetry.Consumption" Version="1.0.0" />
+ <PackageReference Include="Yarp.ReverseProxy" Version="1.0.1" />
+ <PackageReference Include="Yarp.Telemetry.Consumption" Version="1.0.1" />
</ItemGroup>
```
or by selecting `1.0.1` in the NuGet UI inside Visual Studio (`Manage NuGet Packages` / `Updates`)
![image](https://user-images.githubusercontent.com/25307628/162951795-a30f8ed7-77ef-4c4f-920e-58d9e1587ad1.png)

### References

[CVE-2022-26924](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26924)
Vulnerability: GHSA-v726-3vg9-cp34
Summary: Missing Authorization in FastReport
Aliases: CVE-2020-27998
Severity: CRITICAL
CWE: CWE-862
Published: 2021-08-02T17:28:16Z

An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (for example) GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress.
Vulnerability: GHSA-9f8c-f7h4-xghf
Summary: Remote code execution in ChakraCore
Aliases: CVE-2020-1057
Severity: HIGH
CWE: CWE-787, CWE-119
Published: 2021-08-02T17:28:53Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1172, CVE-2020-1180.
Vulnerability: GHSA-ppq7-88c7-q879
Summary: Cross-Site Request Forgery in PiranhaCMS
Aliases: CVE-2021-25976
Severity: HIGH
CWE: CWE-352
Published: 2021-11-17T23:42:40Z

In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a media folder etc., when an ID is known.
Vulnerability: GHSA-xx3h-j3cx-8qfj
Summary: Insufficient Entropy in DotNetNuke
Aliases: CVE-2018-18326
Severity: HIGH
CWE: CWE-331
Published: 2019-07-05T21:08:20Z

DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.
Vulnerability: GHSA-rr3c-f55v-qhv5
Summary: Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Aliases: CVE-2018-0764
Severity: HIGH
Published: 2018-10-16T17:34:00Z

Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to the way XML documents are processed, aka ".NET and .NET Core Denial Of Service Vulnerability". This CVE is unique from CVE-2018-0765.
Vulnerability: GHSA-9q94-v7ch-mxqw
Summary: Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard
Aliases: CVE-2020-8867
Severity: MODERATE
CWE: CWE-613, CWE-367
Published: 2021-08-02T17:35:42Z

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of sessions. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to create a denial-of-service condition against the application. Was ZDI-CAN-10295.
Vulnerability: GHSA-cwp9-956f-vcwh
Summary: Out-of-bounds write
Aliases: CVE-2019-1141
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:56Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131, CVE-2019-1139, CVE-2019-1140, CVE-2019-1195, CVE-2019-1196, CVE-2019-1197.
Vulnerability: GHSA-37pf-w9ff-gqvm
Summary: Out-of-bounds write
Aliases: CVE-2019-0927
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:58:59Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-fv38-4c3m-25v8
Summary: High severity vulnerability that affects Microsoft.ChakraCore
Aliases: CVE-2019-0592
Severity: HIGH
CWE: CWE-787
Published: 2019-04-09T19:43:56Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.
Vulnerability: GHSA-vmf5-924f-25f2
Summary: Out-of-bounds write
Aliases: CVE-2019-1103
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:12Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1106, CVE-2019-1107.
Vulnerability: GHSA-5rq8-3wvf-wrfg
Summary: Out-of-bounds write
Aliases: CVE-2019-0933
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:01Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0937.
Vulnerability: GHSA-9735-p6r2-2hgh
Summary: Out-of-bounds write
Aliases: CVE-2019-0911
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:00Z

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0884, CVE-2019-0918.
Vulnerability: GHSA-jc8g-xhw5-6x46
Summary: Moderate severity vulnerability that affects Microsoft.NETCore.UniversalWindowsPlatform and Microsoft.NETCore.UniversalWindowsPlatform 
Aliases: CVE-2018-0786
Severity: HIGH
CWE: CWE-295
Published: 2018-10-16T19:59:05Z

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."
Vulnerability: GHSA-7mfr-774f-w5r9
Summary: Improper Certificate Validation
Aliases: CVE-2017-11770
Severity: HIGH
CWE: CWE-295
Published: 2022-04-12T00:07:34Z

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".
Vulnerability: GHSA-x8f7-h444-97w4
Summary: The installation wizard in DotNetNuke (DNN) allows privilege escalation
Aliases: CVE-2015-2794
Severity: CRITICAL
Published: 2018-10-16T19:33:42Z

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.
Vulnerability: GHSA-r8hm-w5f7-wj39
Summary: Cross-site scripting vulnerability in TinyMCE plugins
Severity: MODERATE
CWE: CWE-79, CWE-64
Published: 2021-11-02T15:42:52Z

### Impact
A cross-site scripting (XSS) vulnerability was discovered in the URL processing logic of the `image` and `link` plugins. The vulnerability allowed arbitrary JavaScript execution when updating an image or link using a specially crafted URL. This issue only impacted users while editing and the dangerous URLs were stripped in any content extracted from the editor. This impacts all users who are using TinyMCE 5.9.2 or lower.

### Patches
This vulnerability has been patched in TinyMCE 5.10.0 by improved sanitization logic when updating URLs in the relevant plugins.

### Workarounds
To work around this vulnerability, either:
- Upgrade to TinyMCE 5.10.0 or higher
- Disable the `image` and `link` plugins

### Acknowledgements
Tiny Technologies would like to thank Yakir6 for discovering this vulnerability.

### References
https://www.tiny.cloud/docs/release-notes/release-notes510/#securityfixes

### For more information
If you have any questions or comments about this advisory:
* Email us at [infosec@tiny.cloud](mailto:infosec@tiny.cloud)
* Open an issue in the [TinyMCE repo](https://github.com/tinymce/tinymce/issues)
Vulnerability: GHSA-rpch-cqj9-h65r
Summary: High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed
Aliases: CVE-2018-1000210
Severity: HIGH
CWE: CWE-502, CWE-639
Published: 2018-10-16T17:01:10Z

YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deserialize user-controlled types in the line "currentType = Type.GetType(nodeEvent.Tag.Substring(1), throwOnError: false);" and blindly instantiates them. that can result in Code execution in the context of the running process. This attack appear to be exploitable via Victim must parse a specially-crafted YAML file. This vulnerability appears to have been fixed in 5.0.0.
Vulnerability: GHSA-g6j2-ch25-5mmv
Summary: Missing Token Replay Detection in Saml2 Authentication services for ASP.NET
Aliases: CVE-2020-5261
Severity: HIGH
CWE: CWE-294
Published: 2020-03-25T16:52:49Z

### Impact
Token Replay Detection is an important defence in depth measure for Single Sign On solutions. In all previous 2.X versions, the Token Replay Detection is not properly implemented. 

Note that version 1.0.1 is not affected. It has a correct Token Replay Implementation and is safe to use.

### Patches
The 2.5.0 version is patched.

### Workarounds
There are no workarounds with existing versions. Fixing the issue requires code updates.

### References
https://en.wikipedia.org/wiki/Replay_attack

### For more information
If you have any questions or comments about this advisory:
* Comment on #711.
* Email us at [security@sustainsys.com](mailto:security@susatinsys.com) if you think that there are further security issues.
Vulnerability: GHSA-74r6-grj9-8rq6
Summary: Remote Code Execution in AjaxNetProfessional
Aliases: CVE-2021-23758
Severity: CRITICAL
CWE: CWE-502
Published: 2021-12-16T15:27:55Z

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.
Vulnerability: GHSA-59cj-99cw-rq64
Summary: Out-of-bounds write
Aliases: CVE-2019-0913
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:05Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-5p67-cp9c-hqw4
Summary: Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0848
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:57:19Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833.
Vulnerability: GHSA-wvpv-ffcv-r6cw
Summary: Internal NCryptDecrypt method could be used externally from WindowsHello library.
Aliases: CVE-2020-11005
Severity: MODERATE
CWE: CWE-288
Published: 2020-04-14T23:09:13Z

### Impact
Every user of the library before version 1.0.4.

### Patches
Patched in 1.0.4+.

### Workarounds
None.

### References
https://github.com/SeppPenner/WindowsHello/issues/3

### For more information
It this library is used to encrypt text and write the output to a txt file, another executable could be able to decrypt the text using the static method NCryptDecrypt from this same library  without the need to use Windows Hello Authentication again.
Vulnerability: GHSA-mm6g-mmq6-53ff
Summary: Path Traversal in SharpZipLib
Aliases: CVE-2021-32842
Severity: MODERATE
CWE: CWE-22
Published: 2022-02-01T16:23:00Z

SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a check was added if the destination file is under a destination directory. However, it is not enforced that `_baseDirectory` ends with slash. If the _baseDirectory is not slash terminated like `/home/user/dir` it is possible to create a file with a name thats begins as the destination directory one level up from the directory, i.e. `/home/user/dir.sh`. Because of the file name and destination directory constraints, the arbitrary file creation impact is limited and depends on the use case. Version 1.3.3 fixed this vulnerability.
Vulnerability: GHSA-7j34-xq9v-9mqg
Summary: Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0827
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:56:52Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-frxg-hf44-q765
Summary: Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp
Aliases: CVE-2022-24849
Severity: MODERATE
CWE: CWE-200
Published: 2022-04-22T20:39:47Z

### Impact
Users of versions 9.8.5, 9.8.6, 9.9.0 and previously published prereleases of 10.0.0 who have used either one of the two `RequireDisCatSharpDeveloperAttribute`s or the `BaseDiscordClient.LibraryDeveloperTeam` have potentially had their bot token sent to a web server not affiliated with Discord. This server is owned and operated by DisCatSharp's development team. The tokens were not logged, yet it is still advisable to reset the tokens of potentially affected bots.

### Patches
9.9.1 has been released to patch the issue for the current stable release and the current 10.0.0 prereleases are also no longer affected.

### Workarounds
Remove all uses of the two `RequireDisCatSharpDeveloperAttribute`s and all direct calls to `BaseDiscordClient.LibraryDeveloperTeam`.

### Details
The `HttpClient` responsible for sending requests to the Discord API was erroneously reused to send requests to our website when DisCatSharp's team members were to be fetched.

### For more information
If you have any questions or comments about this advisory:
* Join our [Discord server](https://discord.gg/GGYSywkxwN)
* Email us at [ottero@aitsys.dev](mailto:ottero@aitsys.dev)
Vulnerability: GHSA-8hfj-j24r-96c4
Summary: Path Traversal: 'dir/../../filename' in moment.locale
Aliases: CVE-2022-24785
Severity: HIGH
CWE: CWE-27, CWE-22
Published: 2022-04-04T21:25:48Z

### Impact
This vulnerability impacts npm (server) users of moment.js, especially if user provided locale string, eg `fr` is directly used to switch moment locale.

### Patches
This problem is patched in 2.29.2, and the patch can be applied to all affected versions (from 1.0.1 up until 2.29.1, inclusive).

### Workarounds
Sanitize user-provided locale name before passing it to moment.js.

### References
_Are there any links users can visit to find out more?_

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [moment repo](https://github.com/moment/moment)
Vulnerability: GHSA-mg98-x2cm-4cpf
Summary: Out-of-bounds write
Aliases: CVE-2019-1106
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:59:15Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1107.
Vulnerability: GHSA-j66f-h9hm-975m
Summary: Unrestricted Upload of File with Dangerous Type in Umbraco CMS
Aliases: CVE-2020-9472
Severity: MODERATE
CWE: CWE-434
Published: 2021-08-02T17:38:56Z

Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.
Vulnerability: GHSA-hpf7-4c2g-9chf
Summary: Remote Code Execution in Halibut
Aliases: CVE-2021-31819
Severity: CRITICAL
CWE: CWE-502
Published: 2021-09-23T23:17:07Z

In Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote code execution on systems that already trust each other based on certificate verification.
Vulnerability: GHSA-hpw7-3vq3-mmv6
Summary: Insecure deserialization in Wire
Aliases: CVE-2021-29508
Severity: CRITICAL
CWE: CWE-502
Published: 2021-05-19T23:02:38Z

Due to how Wire handles type information in its serialization format, malicious payloads can be passed to a deserializer. e.g. using a surrogate on the sender end, an attacker can pass information about a different type for the receiving end. And by doing so allowing the serializer to create any type on the deserializing end.

**This is the same issue that exists for .NET BinaryFormatter https://docs.microsoft.com/en-us/visualstudio/code-quality/ca2300?view=vs-2019**

This also applies to the fork of Wire, AkkaDotNet/Hyperion.
Vulnerability: GHSA-6973-94v8-5mgw
Summary: Out-of-bounds write
Aliases: CVE-2019-0991
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:42Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0989, CVE-2019-0992, CVE-2019-0993, CVE-2019-1002, CVE-2019-1003, CVE-2019-1024, CVE-2019-1051, CVE-2019-1052.
Vulnerability: GHSA-r8hp-5m7c-jhv4
Summary: Cross-site Scripting OrchardCore.Application.Cms.Targets
Aliases: CVE-2022-0274
Severity: MODERATE
CWE: CWE-79
Published: 2022-01-21T23:08:50Z

Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
Vulnerability: GHSA-p23j-g745-8449
Summary: Out-of-bounds write
Aliases: CVE-2019-1335
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:55:40Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2019-1366.
Vulnerability: GHSA-4vr3-9v7h-5f8v
Summary: Low severity vulnerability that affects Gw2Sharp
Severity: LOW
Published: 2019-06-18T15:38:41Z

## Leaking cached authenticated requests

### Impact
If you've been using one `MemoryCacheMethod` object in multiple instances of `Gw2WebApiClient` and are requesting authenticated endpoints with different access tokens, then you are likely to run into this bug.

When using an instance of `MemoryCacheMethod` and using it with multiple instances of `Gw2WebApiClient`, there's a possibility that cached authenticated responses are leaking to another request to the same endpoint, but with a different Guild Wars 2 access token. The latter request wouldn't start however, and would return the first cached response immediately. This means that the second response (or later responses) may contain the same data as the first response, therefore leaking data from another authenticated endpoint.

The occurence of this is limited however. The Guild Wars 2 API doesn't use the `Expires` header on most (if not all) authenticated endpoints. This header is checked when caching responses. If this header isn't available, the response isn't cached at all. You should still update to at least version 0.3.1 in order to be certain that it won't happen.

### Patches
This bug has been fixed in version 0.3.1. When using an authenticated endpoint, it will prepend the SHA-1 hash of the access token to the cache id.

### Workarounds
For version 0.3.0 and lower, you can use one separate instance of `MemoryCacheMethod` per `Gw2WebApiClient` if you need to use it.

### For more information
If you have any questions or comments about this advisory, you can open an issue in [the Gw2Sharp repository](https://github.com/Archomeda/Gw2Sharp) or contact me on [Discord](https://discord.gg/hNcpDT3).
Vulnerability: GHSA-j89m-gcjf-6ghp
Summary:  Out-of-bounds write in ChakraCore
Aliases: CVE-2020-0825
Severity: HIGH
CWE: CWE-787
Published: 2021-07-28T18:57:02Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-2020-0830, CVE-2020-0831, CVE-2020-0832, CVE-2020-0833, CVE-2020-0848.
Vulnerability: GHSA-7ph8-f946-q5r7
Summary: High severity vulnerability that affects Microsoft.ChakraCore
Aliases: CVE-2019-0611
Severity: HIGH
CWE: CWE-787
Published: 2019-04-09T19:43:54Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.
Vulnerability: GHSA-9pq7-rcxv-47vq
Summary: Incorrect Regular Expression in RestSharp
Aliases: CVE-2021-27293
Severity: HIGH
CWE: CWE-697, CWE-185
Published: 2021-07-14T19:10:01Z

RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.
Vulnerability: GHSA-936x-wgqv-hhgq
Summary: Authenticated path traversal in Umbraco CMS
Aliases: CVE-2020-5811
Severity: MODERATE
CWE: CWE-22
Published: 2021-04-13T15:51:33Z

An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.
Vulnerability: GHSA-qv8q-v995-72gr
Summary: Validation bypass vulnerability 
Severity: LOW
Published: 2020-09-09T17:29:38Z

Back in min June a security vulnerability was reported to the team, the reason for the slow response was due to ownership of some packages
was locked and we wanted to be sure to update all packages before any disclosure was released.

The issue is deemed being a Low severity vulnerability.

### Impact

This vulnerability impacts users who rely on the for last digits of personnummer to be a _real_ personnummer.  

### Patches

The issue have been patched in all repositories. The following versions should be updated to as soon as possible:

C# 3.0.2  
D 3.0.1  
Dart 3.0.3  
Elixir 3.0.0  
Go 3.0.1  
Java 3.3.0  
JavaScript 3.1.0  
Kotlin 1.1.0  
Lua 3.0.1  
PHP 3.0.2  
Perl 3.0.0  
Python 3.0.2  
Ruby 3.0.1  
Rust 3.0.0  
Scala 3.0.1  
Swift 1.0.1  

If you are using any of the earlier packages, please update to latest.

### Workarounds

The issue arrieses from the regular expression allowing the first three digits in the last four digits of the personnummer to be
000, which is invalid. To mitigate this without upgrading, a check on the last four digits can be made to make sure it's not
000x.

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [Personnummer Meta](https://github.com/personnummer/meta/issues)
* Email us at [Personnummer Email](mailto:security@personnummer.dev)

### Credits

Niklas Sköldmark (Medborgarskolan)
Vulnerability: GHSA-vv6j-ww6x-54gx
Summary: Use after free in Animation
Aliases: CVE-2022-0609
Severity: HIGH
CWE: CWE-416
Published: 2022-02-22T21:51:19Z

CVE-2022-0609: Use after free in Animation

- https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0609

Google is aware of reports that exploits for CVE-2022-0609 exist in the wild.

The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but an exploit is available.

There is currently little other public information on the issue other than it has been flagged as `High` severity.
Vulnerability: GHSA-xc6x-cq47-9chw
Summary: Vulnerability in Azure Active Directory Authentication Library
Aliases: CVE-2019-1258
Severity: HIGH
Published: 2019-08-16T14:03:35Z

An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens, aka 'Azure Active Directory Authentication Library Elevation of Privilege Vulnerability'.
Vulnerability: GHSA-qhqf-ghgh-x2m4
Summary: High severity vulnerability that affects Microsoft.AspNetCore.Mvc
Aliases: CVE-2017-0249
Severity: HIGH
CWE: CWE-20
Published: 2018-10-16T19:57:38Z

See https://nvd.nist.gov/vuln/detail/CVE-2017-0249 & https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0249
Vulnerability: GHSA-758c-g2ff-9444
Summary: Out-of-bounds write
Aliases: CVE-2019-1140
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:49Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1131, CVE-2019-1139, CVE-2019-1141, CVE-2019-1195, CVE-2019-1196, CVE-2019-1197.
Vulnerability: GHSA-2ghc-6v89-pw9j
Summary: Prototype Pollution in body-parser-xml 
Aliases: CVE-2021-3666
Severity: HIGH
CWE: CWE-915, CWE-1321
Published: 2021-09-14T20:25:35Z

body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Vulnerability: GHSA-35hc-x2cw-2j4v
Summary: Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Aliases: CVE-2018-0765
Severity: HIGH
CWE: CWE-611
Published: 2018-10-16T19:54:06Z

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.
Vulnerability: GHSA-8j9v-h2vp-2hhv
Summary: XSS in HtmlSanitizer
Aliases: CVE-2020-26293
Severity: LOW
CWE: CWE-79, CWE-74
Published: 2021-01-04T18:22:11Z

### Impact

If you have explicitly allowed the `<style>` tag, an attacker could craft HTML that includes script after passing through the sanitizer. The default settings disallow the `<style>` tag so there is no risk if you have not explicitly allowed the `<style>` tag.

### Patches

The problem has been fixed in version 5.0.372.

### Workarounds

Remove the `<style>` tag from the set of allowed tags.

### For more information

If you have any questions or comments about this advisory open an issue in https://github.com/mganss/HtmlSanitizer

### Credits

This issue was discovered by Michal Bentkowski of Securitum.
Vulnerability: GHSA-5whq-j5qg-wjvp
Summary: Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke
Aliases: CVE-2019-12562
Severity: MODERATE
CWE: CWE-79
Published: 2019-11-18T17:16:06Z

Cross-site scripting (XSS) is possible in DNN (formerly DotNetNuke) before 9.4.0 by remote authenticated users via the Display Name field in the admin notification function.
Vulnerability: GHSA-88cw-3m6x-49f7
Summary: Out-of-bounds Write in ChakraCore
Aliases: CVE-2020-17054
Severity: HIGH
CWE: CWE-787
Published: 2021-08-02T17:25:58Z

Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048.
Vulnerability: GHSA-wc43-7wj6-4ggr
Summary: Remote code execution in ChakraCore
Aliases: CVE-2020-1180
Severity: HIGH
CWE: CWE-787
Published: 2021-08-02T17:29:09Z

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1057, CVE-2020-1172.
Vulnerability: GHSA-pcgf-qjx2-qv4q
Summary: Out-of-bounds write
Aliases: CVE-2019-1217
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:56:08Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1237, CVE-2019-1298, CVE-2019-1300.
Vulnerability: GHSA-5h9g-x5rv-25wg
Summary: Cross-site scripting vulnerability in TinyMCE
Severity: MODERATE
CWE: CWE-79
Published: 2021-10-22T16:24:02Z

### Impact
A cross-site scripting (XSS) vulnerability was discovered in the schema validation logic of the core parser. The vulnerability allowed arbitrary JavaScript execution when inserting a specially crafted piece of content into the editor using the clipboard or editor APIs. This malicious content could then end up in content published outside the editor, if no server-side sanitization was performed. This impacts all users who are using TinyMCE 5.8.2 or lower.

### Patches
This vulnerability has been patched in TinyMCE 5.9.0 by ensuring schema validation was still performed after unwrapping invalid elements.

### Workarounds
To work around this vulnerability, either:
- Upgrade to TinyMCE 5.9.0 or higher
- Manually sanitize the content using the `BeforeSetContent` event (see below)

#### Example: Manually sanitize content
```js
editor.on('BeforeSetContent', function(e) {
  var sanitizedContent = ...; // Manually sanitize content here
  e.content = sanitizedContent;
});
```

### Acknowledgements
Tiny Technologies would like to thank William Bowling for discovering this vulnerability.

### References
https://www.tiny.cloud/docs/release-notes/release-notes59/#securityfixes

### For more information
If you have any questions or comments about this advisory:
* Email us at [infosec@tiny.cloud](mailto:infosec@tiny.cloud)
* Open an issue in the [TinyMCE repo](https://github.com/tinymce/tinymce/issues)
Vulnerability: GHSA-pf46-gqg9-j3v3
Summary: Insufficient Entropy in DotNetNuke
Aliases: CVE-2018-15812
Severity: HIGH
CWE: CWE-331
Published: 2019-07-05T21:08:24Z

DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.
Vulnerability: GHSA-vpc2-7xmf-ppmf
Summary: Out-of-bounds Write in ChakraCore
Aliases: CVE-2020-17048
Severity: HIGH
CWE: CWE-787
Published: 2021-08-02T17:26:11Z

Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054.
Vulnerability: GHSA-3m2r-q8x3-xmf7
Summary: Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv
Severity: MODERATE
Published: 2018-10-16T19:59:48Z

Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where
a specially crafted request can cause excess resource consumption in Kestrel.
Vulnerability: GHSA-j3g9-6fx5-gjv7
Summary: Inadequate Encryption Strength in DotNetNuke
Aliases: CVE-2018-18325
Severity: HIGH
CWE: CWE-326
Published: 2019-07-05T21:08:16Z

DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
Vulnerability: GHSA-v648-p92f-9996
Summary: Out-of-bounds write
Aliases: CVE-2019-0925
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T20:57:39Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-fm9p-5m9f-rq85
Summary: Out-of-bounds write
Aliases: CVE-2019-0915
Severity: HIGH
CWE: CWE-787
Published: 2021-03-29T21:00:03Z

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0912, CVE-2019-0913, CVE-2019-0914, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-0925, CVE-2019-0927, CVE-2019-0933, CVE-2019-0937.
Vulnerability: GHSA-j378-6mmw-hqfr
Summary: Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests
Aliases: CVE-2018-8409
Severity: HIGH
Published: 2018-10-16T19:56:38Z

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.