alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-31623 (published 2022-05-25)
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-667
Affected vendors: mariadb
Affected products: mariadb
CVE-2022-31624 (published 2022-05-25)
MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-667
Affected vendors: mariadb
Affected products: mariadb
CVE-2022-31625 (published 2022-06-16)
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-590
Affected vendors: debian, php
Affected products: debian_linux, php
CVE-2022-31626 (published 2022-06-16)
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: debian, php
Affected products: debian_linux, php
CVE-2022-31627 (published 2022-07-28)
In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagic, incorrect function may be used to free allocated memory, which may lead to heap corruption.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-590
Affected vendors: php
Affected products: php
CVE-2022-31628 (published 2022-09-28)
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-674
Affected vendors: debian, fedoraproject, php
Affected products: debian_linux, fedora, php
CVE-2022-31629 (published 2022-09-28)
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: debian, fedoraproject, php
Affected products: debian_linux, fedora, php
CVE-2022-31630 (published 2022-11-14)
In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. 
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-131
Affected vendors: php
Affected products: php
CVE-2022-31635 (published 2023-06-13)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc, dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware, elite_dragonfly, elite_dragonfly_13.5_inch_g3_notebook_pc, elite_dragonfly_13.5_inch_g3_notebook_pc_firmware, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9_desktop_pc, elite_mini_600_g9_desktop_pc_firmware, elite_mini_800_g9_desktop_pc, elite_mini_800_g9_desktop_pc_firmware, elite_sff_600_g9_desktop_pc, elite_sff_600_g9_desktop_pc_firmware, elite_sff_800_g9_desktop_pc, elite_sff_800_g9_desktop_pc_firmware, elite_slice, elite_slice_firmware, elite_slice_for_meeting_rooms, elite_slice_for_meeting_rooms_firmware, elite_slice_g2_-_audio_ready_with_zoom_rooms, elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms
CVE-2022-31636 (published 2023-06-13)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc, dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware, elite_dragonfly, elite_dragonfly_13.5_inch_g3_notebook_pc, elite_dragonfly_13.5_inch_g3_notebook_pc_firmware, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9_desktop_pc, elite_mini_600_g9_desktop_pc_firmware, elite_mini_800_g9_desktop_pc, elite_mini_800_g9_desktop_pc_firmware, elite_sff_600_g9_desktop_pc, elite_sff_600_g9_desktop_pc_firmware, elite_sff_800_g9_desktop_pc, elite_sff_800_g9_desktop_pc_firmware, elite_slice, elite_slice_firmware, elite_slice_for_meeting_rooms, elite_slice_for_meeting_rooms_firmware, elite_slice_g2_-_audio_ready_with_zoom_rooms, elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms
CVE-2022-31637 (published 2023-06-13)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc, dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware, elite_dragonfly, elite_dragonfly_13.5_inch_g3_notebook_pc, elite_dragonfly_13.5_inch_g3_notebook_pc_firmware, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9_desktop_pc, elite_mini_600_g9_desktop_pc_firmware, elite_mini_800_g9_desktop_pc, elite_mini_800_g9_desktop_pc_firmware, elite_sff_600_g9_desktop_pc, elite_sff_600_g9_desktop_pc_firmware, elite_sff_800_g9_desktop_pc, elite_sff_800_g9_desktop_pc_firmware, elite_slice, elite_slice_firmware, elite_slice_for_meeting_rooms, elite_slice_for_meeting_rooms_firmware, elite_slice_g2_-_audio_ready_with_zoom_rooms, elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms
CVE-2022-31638 (published 2023-06-13)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc, dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware, elite_dragonfly, elite_dragonfly_13.5_inch_g3_notebook_pc, elite_dragonfly_13.5_inch_g3_notebook_pc_firmware, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9_desktop_pc, elite_mini_600_g9_desktop_pc_firmware, elite_mini_800_g9_desktop_pc, elite_mini_800_g9_desktop_pc_firmware, elite_sff_600_g9_desktop_pc, elite_sff_600_g9_desktop_pc_firmware, elite_sff_800_g9_desktop_pc, elite_sff_800_g9_desktop_pc_firmware, elite_slice, elite_slice_firmware, elite_slice_for_meeting_rooms, elite_slice_for_meeting_rooms_firmware, elite_slice_g2_-_audio_ready_with_zoom_rooms, elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms
CVE-2022-31639 (published 2023-06-13)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc, dragonfly_folio_13.5_inch_g3_2-in-1_notebook_pc_firmware, elite_dragonfly, elite_dragonfly_13.5_inch_g3_notebook_pc, elite_dragonfly_13.5_inch_g3_notebook_pc_firmware, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9_desktop_pc, elite_mini_600_g9_desktop_pc_firmware, elite_mini_800_g9_desktop_pc, elite_mini_800_g9_desktop_pc_firmware, elite_sff_600_g9_desktop_pc, elite_sff_600_g9_desktop_pc_firmware, elite_sff_800_g9_desktop_pc, elite_sff_800_g9_desktop_pc_firmware, elite_slice, elite_slice_firmware, elite_slice_for_meeting_rooms, elite_slice_for_meeting_rooms_firmware, elite_slice_g2_-_audio_ready_with_zoom_rooms, elite_slice_g2_-_audio_ready_with_zoom_rooms_firmware, elite_slice_g2_-_partner_ready_with_microsoft_teams_rooms
CVE-2022-31640 (published 2023-06-14)
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: elite_dragonfly, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_slice_g2, elite_slice_g2_firmware, elite_tower_600_g9, elite_tower_600_g9_firmware, elite_tower_680_g9, elite_tower_680_g9_firmware, elite_tower_800_g9, elite_tower_800_g9_firmware, elite_tower_880_g9
CVE-2022-31641 (published 2023-06-14)
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: elite_dragonfly, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_slice_g2, elite_slice_g2_firmware, elite_tower_600_g9, elite_tower_600_g9_firmware, elite_tower_680_g9, elite_tower_680_g9_firmware, elite_tower_800_g9, elite_tower_800_g9_firmware, elite_tower_880_g9
CVE-2022-31642 (published 2023-06-14)
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: hp
Affected products: elite_dragonfly, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_slice_g2, elite_slice_g2_firmware, elite_tower_600_g9, elite_tower_600_g9_firmware, elite_tower_680_g9, elite_tower_680_g9_firmware, elite_tower_800_g9, elite_tower_800_g9_firmware, elite_tower_880_g9
CVE-2022-31643 (published 2023-04-28)
A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: hp
Affected products: dragonfly_folio_g3, dragonfly_folio_g3_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_mt645_g7, elite_mt645_g7_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_tower_600_g9, elite_tower_600_g9_firmware, elite_tower_680_g9, elite_tower_680_g9_firmware, elite_tower_800_g9, elite_tower_800_g9_firmware, elite_tower_880_g9
CVE-2022-31644 (published 2023-06-14)
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: hp
Affected products: dragonfly_folio_g3_2-in-1, dragonfly_folio_g3_2-in-1_firmware, elite_dragonfly, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_folio_2-in-1, elite_folio_2-in-1_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_slice, elite_slice_firmware, elite_slice_g2, elite_slice_g2_firmware, elite_tower_600_g9
CVE-2022-31645 (published 2023-06-14)
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. 
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: hp
Affected products: dragonfly_folio_g3_2-in-1, dragonfly_folio_g3_2-in-1_firmware, elite_dragonfly, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_folio_2-in-1, elite_folio_2-in-1_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_slice, elite_slice_firmware, elite_slice_g2, elite_slice_g2_firmware, elite_tower_600_g9
CVE-2022-31646 (published 2023-06-14)
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: hp
Affected products: dragonfly_folio_g3_2-in-1, dragonfly_folio_g3_2-in-1_firmware, elite_dragonfly, elite_dragonfly_firmware, elite_dragonfly_g2, elite_dragonfly_g2_firmware, elite_dragonfly_g3, elite_dragonfly_g3_firmware, elite_dragonfly_max, elite_dragonfly_max_firmware, elite_folio_2-in-1, elite_folio_2-in-1_firmware, elite_mini_600_g9, elite_mini_600_g9_firmware, elite_mini_800_g9, elite_mini_800_g9_firmware, elite_sff_600_g9, elite_sff_600_g9_firmware, elite_sff_800_g9, elite_sff_800_g9_firmware, elite_slice, elite_slice_firmware, elite_slice_g2, elite_slice_g2_firmware, elite_tower_600_g9
CVE-2022-31647 (published 2023-04-27)
Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vulnerability than CVE-2022-26659.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-59
Affected vendors: docker
Affected products: desktop
CVE-2022-31648 (published 2022-05-26)
Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. The issue is fixed for versions 8.0.x in TPS-5233, for versions 7.3.x in TPS-5324, and for versions 7.2.x in TPS-5235. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: talend
Affected products: administration_center
CVE-2022-31649 (published 2022-06-09)
ownCloud owncloud/core before 10.10.0 Improperly Removes Sensitive Information Before Storage or Transfer.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-668
Affected vendors: owncloud
Affected products: owncloud
CVE-2022-3165 (published 2022-10-17)
An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-191
Affected vendors: fedoraproject, qemu
Affected products: fedora, qemu
CVE-2022-31650 (published 2022-05-25)
In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-697
Affected vendors: sound_exchange_project
Affected products: sound_exchange
CVE-2022-31651 (published 2022-05-25)
In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: sound_exchange_project
Affected products: sound_exchange
CVE-2022-31654 (published 2022-07-12)
VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: vmware
Affected products: vrealize_log_insight
CVE-2022-31655 (published 2022-07-12)
VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: vmware
Affected products: vrealize_log_insight
CVE-2022-31656 (published 2022-08-05)
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31657 (published 2022-08-05)
VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-601
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31658 (published 2022-08-05)
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31659 (published 2022-08-05)
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-3166 (published 2022-12-16)

Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-924
Affected vendors: rockwellautomation
Affected products: micrologix_1100, micrologix_1100_firmware, micrologix_1400, micrologix_1400_firmware
CVE-2022-31660 (published 2022-08-05)
VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31661 (published 2022-08-05)
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31662 (published 2022-08-05)
VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31663 (published 2022-08-05)
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31664 (published 2022-08-05)
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: linux, microsoft, vmware
Affected products: access_connector, identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31665 (published 2022-08-05)
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: linux, microsoft, vmware
Affected products: identity_manager, identity_manager_connector, linux_kernel, one_access, windows
CVE-2022-31666 (published 2024-11-14)
Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook policies of other users.  The attacker could modify Webhook policies configured in other projects.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-285
Affected vendors: linuxfoundation
Affected products: harbor
CVE-2022-31667 (published 2024-11-14)
Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t have access to. 

By sending a request that attempts to update a robot account, and specifying a robot account id and robot account name that belongs to a different project that the user doesn’t have access to, it was possible to revoke the robot account permissions.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L)
Weakness: CWE-285
Affected vendors: linuxfoundation
Affected products: harbor
CVE-2022-31668 (published 2024-11-14)
Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to update a p2p preheat policy with an id that belongs to a project that the currently authenticated user doesn't have access to, the attacker could modify p2p preheat policies configured in other projects.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)
Weakness: CWE-285
Affected vendors: linuxfoundation
Affected products: harbor
CVE-2022-31669 (published 2024-11-14)
Harbor fails to validate the user permissions when updating tag immutability policies. 

By sending a request to update a tag immutability policy with an id that belongs to a
project that the currently authenticated user doesn’t have access to, the attacker could
modify tag immutability policies configured in other projects.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)
Weakness: CWE-285
Affected vendors: linuxfoundation
Affected products: harbor
CVE-2022-3167 (published 2022-09-08)
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-1021
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-31670 (published 2024-11-14)
Harbor fails to validate the user permissions when updating tag retention policies. 

By sending a request to update a tag retention policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify
tag retention policies configured in other projects.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)
Weakness: CWE-285
Affected vendors: linuxfoundation
Affected products: harbor
CVE-2022-31671 (published 2024-11-14)
Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticated users could read all the job logs stored in the Harbor database.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)
Weakness: CWE-285
Affected vendors: linuxfoundation
Affected products: harbor
CVE-2022-31672 (published 2022-08-10)
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: vmware
Affected products: vrealize_operations
CVE-2022-31673 (published 2022-08-10)
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: vmware
Affected products: vrealize_operations
CVE-2022-31674 (published 2022-08-10)
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-532
Affected vendors: vmware
Affected products: vrealize_operations
CVE-2022-31675 (published 2022-08-10)
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: vmware
Affected products: vrealize_operations
CVE-2022-31676 (published 2022-08-23)
VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: debian, fedoraproject, linux, microsoft, netapp, vmware
Affected products: debian_linux, fedora, linux_kernel, ontap_select_deploy_administration_utility, tools, windows
CVE-2022-31677 (published 2022-08-29)
An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper use of their refresh token might allow.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-613
Affected vendors: vmware
Affected products: pinniped
CVE-2022-31678 (published 2022-10-28)
VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-611
Affected vendors: vmware
Affected products: cloud_foundation, nsx_data_center
CVE-2022-31679 (published 2022-09-21)
Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: vmware
Affected products: spring_data_rest
CVE-2022-31680 (published 2022-10-07)
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: vmware
Affected products: vcenter_server
CVE-2022-31681 (published 2022-10-07)
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: vmware
Affected products: cloud_foundation, esxi
CVE-2022-31682 (published 2022-10-11)
VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: vmware
Affected products: vrealize_operations
CVE-2022-31683 (published 2022-12-19)
Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue. A Concourse user can send a request with body including :team_name=team2 to bypass team scope check to gain access to certain resources belong to any other team.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-639
Affected vendors: pivotal_software
Affected products: concourse
CVE-2022-31684 (published 2022-10-19)
Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-532
Affected vendors: pivotal
Affected products: reactor_netty
CVE-2022-31685 (published 2022-11-09)
VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: vmware
Affected products: workspace_one_assist
CVE-2022-31686 (published 2022-11-09)
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: vmware
Affected products: workspace_one_assist
CVE-2022-31687 (published 2022-11-09)
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: vmware
Affected products: workspace_one_assist
CVE-2022-31688 (published 2022-11-09)
VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: vmware
Affected products: workspace_one_assist
CVE-2022-31689 (published 2022-11-09)
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-384
Affected vendors: vmware
Affected products: workspace_one_assist
CVE-2022-3169 (published 2022-09-09)
A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: debian, fedoraproject, linux
Affected products: debian_linux, fedora, linux_kernel
CVE-2022-31690 (published 2022-10-31)
Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the browser) to the Authorization Server which can lead to a privilege escalation on the subsequent approval. This scenario can happen if the Authorization Server responds with an OAuth2 Access Token Response containing an empty scope list (per RFC 6749, Section 5.1) on the subsequent request to the token endpoint to obtain the access token.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: netapp, vmware
Affected products: active_iq_unified_manager, spring_security
CVE-2022-31691 (published 2022-11-04)
Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some special syntax in the YAML that under certain circumstances allows for potentially harmful remote code execution by the attacker.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: vmware
Affected products: bosh_editor, cloudfoundry_manifest_yml_support, concourse_ci_pipeline_editor, spring_boot_tools, spring_tools
CVE-2022-31692 (published 2022-10-31)
Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expects that Spring Security applies security to forward and include dispatcher types. The application uses the AuthorizationFilter either manually or via the authorizeHttpRequests() method. The application configures the FilterChainProxy to apply to forward and/or include requests (e.g. spring.security.filter.dispatcher-types = request, error, async, forward, include). The application may forward or include the request to a higher privilege-secured endpoint.The application configures Spring Security to apply to every dispatcher type via authorizeHttpRequests().shouldFilterAllDispatcherTypes(true)
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-639
Affected vendors: netapp, vmware
Affected products: active_iq_unified_manager, spring_security
CVE-2022-31693 (published 2023-06-07)
VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest OS, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest OS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-404
Affected vendors: microsoft, vmware
Affected products: tools, windows
CVE-2022-31694 (published 2022-11-18)
InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent directory when displaying popups. This may allow an attacker to plant a malicious DLL in the installer parent directory to allow executing code with the privileges of the installer (when the popup triggers the loading of the library). Exploiting these type of vulnerabilities generally require that an attacker has access to a vulnerable machine to plant the malicious DLL.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: installbuilder
Affected products: installbuilder
CVE-2022-31696 (published 2022-12-13)
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: vmware
Affected products: cloud_foundation, esxi
CVE-2022-31697 (published 2022-12-13)
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: vmware
Affected products: cloud_foundation, vcenter_server
CVE-2022-31698 (published 2022-12-13)
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-400
Affected vendors: vmware
Affected products: cloud_foundation, vcenter_server
CVE-2022-31699 (published 2022-12-13)
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-787
Affected vendors: vmware
Affected products: cloud_foundation, esxi
CVE-2022-3170 (published 2022-09-13)
An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with '\0'. A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially escalate their privileges on the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: linux
Affected products: linux_kernel
CVE-2022-31700 (published 2022-12-14)
VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft, vmware
Affected products: access, cloud_foundation, identity_manager, windows
CVE-2022-31701 (published 2022-12-14)
VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-306
Affected vendors: linux, vmware
Affected products: access, cloud_foundation, identity_manager_connector, linux_kernel
CVE-2022-31702 (published 2022-12-14)
vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the vRNI REST API can execute commands without authentication.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: vmware
Affected products: vrealize_network_insight
CVE-2022-31703 (published 2022-12-14)
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: vmware
Affected products: vrealize_log_insight
CVE-2022-31704 (published 2023-01-26)
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: vmware
Affected products: vrealize_log_insight
CVE-2022-31705 (published 2022-12-14)
VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple, vmware
Affected products: esxi, fusion, mac_os_x, workstation
CVE-2022-31706 (published 2023-01-26)
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: vmware
Affected products: vrealize_log_insight
CVE-2022-31707 (published 2022-12-16)
vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: vmware
Affected products: vrealize_operations
CVE-2022-31708 (published 2022-12-16)
vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-284
Affected vendors: vmware
Affected products: vrealize_operations
CVE-2022-3171 (published 2022-10-12)
A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: fedoraproject, google
Affected products: fedora, google-protobuf, protobuf-java, protobuf-javalite, protobuf-kotlin, protobuf-kotlin-lite