deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-21497
Published: 2022-04-19
Description: Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Services Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Web Services Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Web Services Manager accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N).
CVSS Score: 8.1 (HIGH)
References: https://www.oracle.com/security-alerts/cpuapr2022.html; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2022-21498
Published: 2022-04-19
Description: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
CVSS Score: 6.5 (MEDIUM)
References: https://www.oracle.com/security-alerts/cpuapr2022.html; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2022-25788
Published: 2022-04-19
Description: A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002
CVE: CVE-2022-27527
Published: 2022-04-19
Description: A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010; https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010
CVE: CVE-2022-27862
Published: 2022-04-19
Description: Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to upload and execute dangerous file types (e.g. PHP shell) via the signature upload on the booking form.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-5-3-arbitrary-file-upload-leading-to-rce; https://wordpress.org/plugins/vikbooking/#developers; https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-5-3-arbitrary-file-upload-leading-to-rce
CVE: CVE-2022-27863
Published: 2022-04-19
Description: Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking data by guessing / brute-forcing easy predictable booking IDs via search POST requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-5-3-sensitive-data-exposure-vulnerability; https://wordpress.org/plugins/vikbooking/#developers; https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-5-3-sensitive-data-exposure-vulnerability
CVE: CVE-2022-28221
Published: 2022-04-19
Description: The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.wordfence.com/blog/2022/03/reflected-xss-in-spam-protection-antispam-firewall-by-cleantalk/; https://www.wordfence.com/blog/2022/03/reflected-xss-in-spam-protection-antispam-firewall-by-cleantalk/
CVE: CVE-2022-28222
Published: 2022-04-19
Description: The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php`
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.wordfence.com/blog/2022/03/reflected-xss-in-spam-protection-antispam-firewall-by-cleantalk/; https://www.wordfence.com/blog/2022/03/reflected-xss-in-spam-protection-antispam-firewall-by-cleantalk/
CVE: CVE-2021-3100
Published: 2022-04-19
Description: The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM being patched, allowing it to escalate privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250, CWE-269
References: https://alas.aws.amazon.com/AL2/ALAS-2021-1732.html; https://alas.aws.amazon.com/ALAS-2021-1554.html; https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities
CVE: CVE-2021-3101
Published: 2022-04-19
Description: Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on the container.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250, CWE-269
References: https://github.com/bottlerocket-os/hotdog/security/advisories/GHSA-qfhv-c5cc-mhgp; https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities; https://github.com/bottlerocket-os/hotdog/security/advisories/GHSA-qfhv-c5cc-mhgp
CVE: CVE-2022-0070
Published: 2022-04-19
Description: Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250, CWE-269
References: https://alas.aws.amazon.com/cve/html/CVE-2022-0070.html; https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities; https://alas.aws.amazon.com/cve/html/CVE-2022-0070.html
CVE: CVE-2022-0071
Published: 2022-04-19
Description: Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM process. This would allow a container to exhaust the resources of the host, modify devices, or make syscalls that would otherwise be blocked.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250, CWE-269
References: https://github.com/bottlerocket-os/hotdog/security/advisories/GHSA-jr96-7frv-3mpj; https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities; https://github.com/bottlerocket-os/hotdog/security/advisories/GHSA-jr96-7frv-3mpj
CVE: CVE-2022-24858
Published: 2022-04-19
Description: next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2 will patch this vulnerability. If you are not able to upgrade for any reason, you can add a configuration to your callbacks option. If you already have a `redirect` callback, make sure that you match the incoming `url` origin against the `baseUrl`.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-290, CWE-601
References: https://github.com/nextauthjs/next-auth/security/advisories/GHSA-f9wg-5f46-cjmw; https://next-auth.js.org/configuration/callbacks#redirect-callback; https://next-auth.js.org/getting-started/upgrade-v4
CVE: CVE-2022-24826
Published: 2022-04-20
Description: On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. Similarly, if the malicious repository contains files named `..exe` and `cygpath.exe`, and `cygpath.exe` is not found in `PATH`, the `..exe` program will be executed when certain Git LFS commands are run. More generally, if the current working directory contains any file with a base name of `.` and a file extension from `PATHEXT` (except `.bat` and `.cmd`), and also contains another file with the same base name as a program Git LFS intends to execute (such as `git`, `cygpath`, or `uname`) and any file extension from `PATHEXT` (including `.bat` and `.cmd`), then, on Windows, when Git LFS attempts to execute the intended program the `..exe`, `..com`, etc., file will be executed instead, but only if the intended program is not found in any directory listed in `PATH`. The vulnerability occurs because when Git LFS detects that the program it intends to run does not exist in any directory listed in `PATH` then Git LFS passes an empty string as the executable file path to the Go `os/exec` package, which contains a bug such that, on Windows, it prepends the name of the current working directory (i.e., `.`) to the empty string without adding a path separator, and as a result searches in that directory for a file with the base name `.` combined with any file extension from `PATHEXT`, executing the first one it finds. (The reason `..bat` and `..cmd` files are not executed in the same manner is that, although the Go `os/exec` package tries to execute them just as it does a `..exe` file, the Microsoft Win32 API `CreateProcess()` family of functions have an undocumented feature in that they apparently recognize when a caller is attempting to execute a batch script file and instead run the `cmd.exe` command interpreter, passing the full set of command line arguments as parameters. These are unchanged from the command line arguments set by Git LFS, and as such, the intended program's name is the first, resulting in a command line like `cmd.exe /c git`, which then fails.) Git LFS has resolved this vulnerability by always reporting an error when a program is not found in any directory listed in `PATH` rather than passing an empty string to the Go `os/exec` package in this case. The bug in the Go `os/exec` package has been reported to the Go project and is expected to be patched after this security advisory is published. The problem was introduced in version 2.12.1 and is patched in version 3.1.3. Users of affected versions should upgrade to version 3.1.3. There are currently no known workarounds at this time.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-426, CWE-426
References: https://github.com/git-lfs/git-lfs/releases; https://github.com/git-lfs/git-lfs/security/advisories/GHSA-6rw3-3whw-jvjj; https://github.com/git-lfs/git-lfs/releases
CVE: CVE-2022-24860
Published: 2022-04-20
Description: Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP addresses.
CVSS Score: 7.4 (HIGH)
CWE: CWE-321, CWE-798
References: https://github.com/vran-dev/databasir/blob/master/core/src/main/java/com/databasir/core/infrastructure/jwt/JwtTokens.java; https://github.com/vran-dev/databasir/security/advisories/GHSA-9prp-5jc9-jpgg; https://user-images.githubusercontent.com/75008428/163742517-ecc1c787-1ef6-4df9-bdf2-407b2b31e111.png
CVE: CVE-2022-27629
Published: 2022-04-20
Description: Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN31606885/index.html; https://plugins.trac.wordpress.org/changeset?new=2362275%40paid-membership&old=2345274%40paid-membership; https://wordpress.org/plugins/paid-membership/
CVE: CVE-2022-29266
Published: 2022-04-20
Description: In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209, CWE-209
References: http://www.openwall.com/lists/oss-security/2022/04/20/1; https://lists.apache.org/thread/6qpfyxogbvn18g9xr8g218jjfjbfsbhr; http://www.openwall.com/lists/oss-security/2022/04/20/1
CVE: CVE-2022-24675
Published: 2022-04-20
Description: encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf; https://groups.google.com/g/golang-announce; https://groups.google.com/g/golang-announce/c/oecdBNLOml8
CVE: CVE-2022-27536
Published: 2022-04-20
Description: Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf; https://groups.google.com/g/golang-announce; https://groups.google.com/g/golang-announce/c/oecdBNLOml8
CVE: CVE-2022-28327
Published: 2022-04-20
Description: The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
CVSS Score: 7.5 (HIGH)
References: https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf; https://groups.google.com/g/golang-announce; https://groups.google.com/g/golang-announce/c/oecdBNLOml8
CVE: CVE-2022-29527
Published: 2022-04-20
Description: Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-732
References: https://bugzilla.suse.com/show_bug.cgi?id=1196556; https://github.com/aws/amazon-ssm-agent/commit/0fe8ae99b2ff25649c7b86d3bc05fc037400aca7; https://github.com/aws/amazon-ssm-agent/releases/tag/3.1.1208.0
CVE: CVE-2022-1254
Published: 2022-04-20
Description: A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release 11.x prior to 11.1.3 allows a remote attacker to redirect a user to a malicious website controlled by the attacker. This is possible because SWG incorrectly creates a HTTP redirect response when a user clicks a carefully constructed URL. Following the redirect response, the new request is still filtered by the SWG policy.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10381; https://kc.mcafee.com/corporate/index?page=content&id=SB10381
CVE: CVE-2022-25342
Published: 2022-04-20
Description: An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Broken Access Control. It does not properly validate requests for access to data and functionality under the /mngset/authset path. By not verifying permissions for access to resources, it allows a potential attacker to view pages that are not allowed.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-25343
Published: 2022-04-20
Description: An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /download/set.cgi page by manipulating the failhtmfile variable, is able to cause interruption of the service provided by the Web Application.
CVSS Score: 7.5 (HIGH)
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-25344
Published: 2022-04-20
Description: An XSS issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application doesn't properly check parameters, sent in a /dvcset/sysset/set.cgi POST request via the arg01.Hostname field, before saving them on the server. In addition, the JavaScript malicious content is then reflected back to the end user and executed by the web browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2021-38483
Published: 2022-04-20
Description: The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-732
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03
CVE: CVE-2021-43933
Published: 2022-04-20
Description: The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-400
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03
CVE: CVE-2021-43986
Published: 2022-04-20
Description: The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284, CWE-276
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03
CVE: CVE-2021-43988
Published: 2022-04-20
Description: The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03
CVE: CVE-2021-43990
Published: 2022-04-20
Description: The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-611
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03
CVE: CVE-2022-0567
Published: 2022-04-20
Description: A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=2053326; https://bugzilla.redhat.com/show_bug.cgi?id=2053326
CVE: CVE-2022-1039
Published: 2022-04-20
Description: The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the SSH service does not support root login, a user logging in using either of the other Linux accounts may elevate to root access using the su command if they have access to the associated password.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-521, CWE-521
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03
CVE: CVE-2022-1318
Published: 2022-04-20
Description: Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuration pages can be viewed by a malicious actor. The size of certain communications packets are predictable. This would allow an attacker to learn the state of the system if they can observe the traffic. This would be possible even if the traffic were encrypted, e.g., using WPA2, as the packet sizes would remain observable. The communication encryption scheme is theoretically sound, but is not strong enough for the level of protection required.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-326, CWE-203
References: https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf; https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf
CVE: CVE-2022-26516
Published: 2022-04-20
Description: Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source or a file that was compromised between download and deployment.
CVSS Score: 8.4 (HIGH)
CWE: CWE-345
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03
CVE: CVE-2022-26519
Published: 2022-04-20
Description: There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-307
References: https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf; https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf
CVE: CVE-2022-27179
Published: 2022-04-20
Description: A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-522
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03