deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-3223
Published: 2022-09-16
Description: Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.3.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jgraph/drawio/commit/ea012baba6fb2e903797fa6306833ca4f31ab361; https://huntr.dev/bounties/125791b6-3a68-4235-8866-6bc3a52332ba; https://github.com/jgraph/drawio/commit/ea012baba6fb2e903797fa6306833ca4f31ab361
CVE: CVE-2022-38808
Published: 2022-09-16
Description: ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/cloudwebsoft/ywoa/issues/26; https://github.com/cloudwebsoft/ywoa/issues/26
CVE: CVE-2022-38843
Published: 2022-09-16
Description: EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-unrestricted-file-upload-7860b15d12bc; https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-unrestricted-file-upload-7860b15d12bc
CVE: CVE-2022-38844
Published: 2022-09-16
Description: CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exporting contacts in CSV file may end up executing the malicious system commands on his system.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-csv-injection-4c07494e2a76; https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-csv-injection-4c07494e2a76
CVE: CVE-2022-38845
Published: 2022-09-16
Description: Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending crafted csv file containing malicious JavaScript to authenticated user. Any authenticated user importing the crafted CSV file may end up running the malicious JavaScripting in the browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-cross-site-scripting-e3e6c708df18; https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-cross-site-scripting-e3e6c708df18
CVE: CVE-2022-38846
Published: 2022-09-16
Description: EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). An attacker may capture the cookie from the insecure channel using MITM attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-missing-secure-flag-1664bac5ffe4; https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-missing-secure-flag-1664bac5ffe4
CVE: CVE-2022-3176
Published: 2022-09-16
Description: There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the io_uring poll doesn't handle POLLFREE. This allows a use-after-free to occur if a signalfd or binder fd is polled with io_uring poll, and the waitqueue gets freed. We recommend upgrading past commit fc78b2fc21f10c4c9c4d5d659a685710ffa63659
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit?h=linux-5.4.y&id=fc78b2fc21f10c4c9c4d5d659a685710ffa63659; https://kernel.dance/#fc78b2fc21f10c4c9c4d5d659a685710ffa63659; https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
CVE: CVE-2021-42949
Published: 2022-09-16
Description: The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://github.com/dhammon/HotelDruid-CVE-2021-42949; https://github.com/dhammon/Security; https://www.hoteldruid.com/
CVE: CVE-2022-37250
Published: 2022-09-16
Description: Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/craftcms/cms/commit/cdc9cb66d0716c9552e4113c8e426fd1a31f9516; https://labs.integrity.pt/advisories/cve-2022-37250/; https://github.com/craftcms/cms/commit/cdc9cb66d0716c9552e4113c8e426fd1a31f9516
CVE: CVE-2022-38823
Published: 2022-09-16
Description: In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/hard_code.md; https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/hard_code.md
CVE: CVE-2022-38826
Published: 2022-09-16
Description: In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setStaticDhcpRules_1.md; https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setStaticDhcpRules_1.md
CVE: CVE-2022-38827
Published: 2022-09-16
Description: TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setWiFiWpsStart_2.md; https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setWiFiWpsStart_2.md
CVE: CVE-2022-38828
Published: 2022-09-16
Description: TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setWiFiWpsStart_1.md; https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setWiFiWpsStart_1.md
CVE: CVE-2022-38829
Published: 2022-09-16
Description: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/setMacFilterCfg.md; https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/setMacFilterCfg.md
CVE: CVE-2022-38830
Published: 2022-09-16
Description: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/setIPv6Status.md; https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/setIPv6Status.md
CVE: CVE-2022-38831
Published: 2022-09-16
Description: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/SetNetControlList.md; https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/SetNetControlList.md
CVE: CVE-2022-38832
Published: 2022-09-16
Description: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/saluteSUC/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-1.md; https://github.com/saluteSUC/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-1.md
CVE: CVE-2022-38833
Published: 2022-09-16
Description: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/saluteSUC/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-2.md; https://github.com/saluteSUC/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-2.md
CVE: CVE-2021-42948
Published: 2022-09-16
Description: HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
CVSS Score: 3.7 (LOW)
CWE: CWE-319
References: https://github.com/dhammon/HotelDruid-CVE-2021-42948; https://github.com/dhammon/Security; https://www.hoteldruid.com/
CVE: CVE-2022-35193
Published: 2022-09-16
Description: TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/HuangYuHsiangPhone/CVEs/; https://github.com/HuangYuHsiangPhone/CVEs/tree/main/TestLink/CVE-2022-35193; https://github.com/HuangYuHsiangPhone/CVEs/
CVE: CVE-2022-35195
Published: 2022-09-16
Description: TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php
CVSS Score: 7.2 (HIGH)
References: https://github.com/HuangYuHsiangPhone/CVEs/; https://github.com/HuangYuHsiangPhone/CVEs/tree/main/TestLink/CVE-2022-35195; https://github.com/HuangYuHsiangPhone/CVEs/
CVE: CVE-2022-37248
Published: 2022-09-16
Description: Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627; https://labs.integrity.pt/advisories/cve-2022-37248/; https://github.com/craftcms/cms/commit/cedeba0609e4b173cd584dae7f33c5f713f19627
CVE: CVE-2022-38877
Published: 2022-09-16
Description: Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/MagicWHat/bug_report/blob/main/vendors/mayuri_k/garage-management-system/RCE-1.md; https://github.com/MagicWHat/bug_report/blob/main/vendors/mayuri_k/garage-management-system/RCE-1.md
CVE: CVE-2022-38878
Published: 2022-09-16
Description: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/MagicWHat/bug_report/blob/main/vendors/wsatm/school-activity-updates-sms-notification/SQLi-1.md; https://github.com/MagicWHat/bug_report/blob/main/vendors/wsatm/school-activity-updates-sms-notification/SQLi-1.md
CVE: CVE-2022-40337
Published: 2022-09-16
Description: OASES (aka Open Aviation Strategic Engineering System) 8.8.0.2 allows attackers to execute arbitrary code via the Open Print Folder menu.
CVSS Score: 8.8 (HIGH)
References: https://gist.github.com/Delson704557/df06fcee0b2676d611aef799e1c4a0e6; https://oases.aero/; https://www.aspiresoftware.com/companies/oases/
CVE: CVE-2021-41731
Published: 2022-09-16
Description: Cross Site Scripting (XSS vulnerability exists in )Sourcecodester News247 News Magazine (CMS) PHP 5.6 or higher and MySQL 5.7 or higher via the blog category name field
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/168384/News247-News-Magazine-1.0-Cross-Site-Scripting.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.sourcecodester.com
CVE: CVE-2021-42597
Published: 2022-09-16
Description: A Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS V 1.0 via the Add New Tenant List Rent List form.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.sourcecodester.com/php/14932/storage-unit-rental-management-system-using-php-free-source-code.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2022-36402
Published: 2022-09-16
Description: An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-118, CWE-190
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=2072; https://bugzilla.openanolis.cn/show_bug.cgi?id=2072
CVE: CVE-2022-37775
Published: 2022-09-16
Description: Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://genesys.com; http://packetstormsecurity.com/files/168410/Genesys-PureConnect-Cross-Site-Scripting.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2022-38408
Published: 2022-09-16
Description: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/illustrator/apsb22-55.html; https://helpx.adobe.com/security/products/illustrator/apsb22-55.html
CVE: CVE-2022-38409
Published: 2022-09-16
Description: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-55.html; https://helpx.adobe.com/security/products/illustrator/apsb22-55.html
CVE: CVE-2022-38410
Published: 2022-09-16
Description: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-55.html; https://helpx.adobe.com/security/products/illustrator/apsb22-55.html
CVE: CVE-2022-38411
Published: 2022-09-16
Description: Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb22-54.html; https://helpx.adobe.com/security/products/animate/apsb22-54.html
CVE: CVE-2022-38412
Published: 2022-09-16
Description: Adobe Animate version 21.0.11 (and earlier) and 22.0.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb22-54.html; https://helpx.adobe.com/security/products/animate/apsb22-54.html
CVE: CVE-2022-3225
Published: 2022-09-16
Description: Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.
CVSS Score: 8.8 (HIGH)
CWE: CWE-913, CWE-913
References: https://github.com/budibase/budibase/commit/d35864be[PII_REDACTED]a01307f81ffcabf6d549df; https://huntr.dev/bounties/a13a56b7-04da-4560-b8ec-0d637d12a245; https://github.com/budibase/budibase/commit/d35864be[PII_REDACTED]a01307f81ffcabf6d549df
CVE: CVE-2020-36600
Published: 2022-09-16
Description: Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2020-36601
Published: 2022-09-16
Description: Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2021-40017
Published: 2022-09-16
Description: The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2022/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/10/
CVE: CVE-2021-40019
Published: 2022-09-16
Description: Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds access.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2021-40023
Published: 2022-09-16
Description: Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2021-40024
Published: 2022-09-16
Description: Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2021-46836
Published: 2022-09-16
Description: Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2022-28852
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-28853
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-28854
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-28855
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-28856
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-28857
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-30671
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-30672
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html