deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-0515
Published: 2023-01-26
Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219335.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_forget_password_email.md; https://vuldb.com/?ctiid.219335; https://vuldb.com/?id.219335
CVE: CVE-2023-0516
Published: 2023-01-26
Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file user/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219336.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/linmoren/online-tours-travels-management-system/blob/main/user_forget_password_email.md; https://vuldb.com/?ctiid.219336; https://vuldb.com/?id.219336
CVE: CVE-2023-20904
Published: 2023-01-26
Description: In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-246300272
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20905
Published: 2023-01-26
Description: In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-241387741
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20908
Published: 2023-01-26
Description: In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239415861
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20912
Published: 2023-01-26
Description: In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-246301995
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20913
Published: 2023-01-26
Description: In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246933785
CVSS Score: 7.8 (HIGH)
CWE: CWE-1021, CWE-1021
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20915
Published: 2023-01-26
Description: In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone account without user interaction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-246930197
CVSS Score: 7.8 (HIGH)
CWE: CWE-670, CWE-670
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20916
Published: 2023-01-26
Description: In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-229256049
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20919
Published: 2023-01-26
Description: In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-252663068
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20920
Published: 2023-01-26
Description: In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-204584366
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20921
Published: 2023-01-26
Description: In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-243378132
CVSS Score: 7.3 (HIGH)
CWE: CWE-670, CWE-670
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20922
Published: 2023-01-26
Description: In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-237291548
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://source.android.com/security/bulletin/2023-01-01; https://source.android.com/security/bulletin/2023-01-01
CVE: CVE-2023-20923
Published: 2023-01-26
Description: In exported content providers of ShannonRcs, there is a possible way to get access to protected content providers due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-246933910References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://source.android.com/security/bulletin/pixel/2023-01-01; https://source.android.com/security/bulletin/pixel/2023-01-01
CVE: CVE-2023-20924
Published: 2023-01-26
Description: In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-240428519References: N/A
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://source.android.com/security/bulletin/pixel/2023-01-01; https://source.android.com/security/bulletin/pixel/2023-01-01
CVE: CVE-2023-20925
Published: 2023-01-26
Description: In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236674672References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-01-01; https://source.android.com/security/bulletin/pixel/2023-01-01
CVE: CVE-2023-20928
Published: 2023-01-26
Description: In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667, CWE-416
References: http://packetstormsecurity.com/files/170855/Android-Binder-VMA-Management-Security-Issues.html; https://source.android.com/security/bulletin/2023-01-01; http://packetstormsecurity.com/files/170855/Android-Binder-VMA-Management-Security-Issues.html
CVE: CVE-2023-22468
Published: 2023-01-26
Description: Discourse is an open source platform for community discussion. Versions prior to 2.8.13 (stable), 3.0.0.beta16 (beta) and 3.0.0beta16 (tests-passed), are vulnerable to cross-site Scripting. A maliciously crafted URL can be included in a post to carry out cross-site  scripting attacks on sites with disabled or overly permissive CSP (Content Security Policy). Discourse's default CSP prevents this vulnerability. This vulnerability is patched in versions 2.8.13 (stable), 3.0.0.beta16 (beta) and 3.0.0beta16 (tests-passed). As a workaround, enable and/or restore your site's CSP to the default one provided with Discourse.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://github.com/discourse/discourse/security/advisories/GHSA-8mr2-xf8r-wr8m; https://github.com/discourse/discourse/security/advisories/GHSA-8mr2-xf8r-wr8m
CVE: CVE-2023-22482
Published: 2023-01-26
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions of Argo CD starting with v1.8.2 and prior to 2.3.13, 2.4.19, 2.5.6, and 2.6.0-rc-3  are vulnerable to an improper authorization bug causing the API to accept certain invalid tokens. OIDC providers include an `aud` (audience) claim in signed tokens. The value of that claim specifies the intended audience(s) of the token (i.e. the service or services which are meant to accept the token). Argo CD _does_ validate that the token was signed by Argo CD's configured OIDC provider. But Argo CD _does not_ validate the audience claim, so it will accept tokens that are not intended for Argo CD. If Argo CD's configured OIDC provider also serves other audiences (for example, a file storage service), then Argo CD will accept a token intended for one of those other audiences. Argo CD will grant the user privileges based on the token's `groups` claim, even though those groups were not intended to be used by Argo CD. This bug also increases the impact of a stolen token. If an attacker steals a valid token for a different audience, they can use it to access Argo CD. A patch for this vulnerability has been released in versions 2.6.0-rc3, 2.5.6, 2.4.19, and 2.3.13. There are no workarounds.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-863
References: https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc; https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc
CVE: CVE-2023-22486
Published: 2023-01-26
Description: cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a  polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7.
CVSS Score: 3.5 (LOW)
CWE: CWE-400, CWE-407, CWE-400, CWE-407
References: https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p; https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p
CVE: CVE-2023-22500
Published: 2023-01-26
Description: GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6 are vulnerable to Incorrect Authorization. This vulnerability allow unauthorized access to inventory files. Thus, if anonymous access to FAQ is allowed, inventory files are accessbile by unauthenticated users. This issue is patched in version 10.0.6. As a workaround, disable native inventory and delete inventory files from server (default location is `files/_inventory`).
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-3ghv-p34r-5ghx; https://github.com/glpi-project/glpi/security/advisories/GHSA-3ghv-p34r-5ghx
CVE: CVE-2023-22722
Published: 2023-01-26
Description: GLPI is a Free Asset and IT Management Software package. Versions 9.4.0 and above, prior to 10.0.6 are subject to Cross-site Scripting. An attacker can persuade a victim into opening a URL containing a payload exploiting this vulnerability. After exploited, the attacker can make actions as the victim or exfiltrate session cookies. This issue is patched in version 10.0.6.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-352j-wr38-493c; https://github.com/glpi-project/glpi/security/advisories/GHSA-352j-wr38-493c
CVE: CVE-2023-22724
Published: 2023-01-26
Description: GLPI is a Free Asset and IT Management Software package. Versions prior to 10.0.6 are subject to Cross-site Scripting via malicious RSS feeds. An Administrator can import a malicious RSS feed that contains Cross Site Scripting (XSS) payloads inside RSS links. Victims who wish to visit an RSS content and click on the link will execute the Javascript. This issue is patched in 10.0.6.

CVSS Score: 6.2 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-x9g4-j85w-cmff; https://github.com/glpi-project/glpi/security/advisories/GHSA-x9g4-j85w-cmff
CVE: CVE-2023-22725
Published: 2023-01-26
Description: GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability allow for an administrator to create a malicious external link. This issue is patched in 10.0.6.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-f5g6-fxrw-pfj7; https://github.com/glpi-project/glpi/security/advisories/GHSA-f5g6-fxrw-pfj7
CVE: CVE-2023-22736
Published: 2023-01-26
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and version 2.6.0-rc4, are vulnerable to an authorization bypass bug which allows a malicious Argo CD user to deploy Applications outside the configured allowed namespaces. Reconciled Application namespaces are specified as a comma-delimited list of glob patterns. When sharding is enabled on the Application controller, it does not enforce that list of patterns when reconciling Applications. For example, if Application namespaces are configured to be argocd-*, the Application controller may reconcile an Application installed in a namespace called other, even though it does not start with argocd-. Reconciliation of the out-of-bounds Application is only triggered when the Application is updated, so the attacker must be able to cause an update operation on the Application resource. This bug only applies to users who have explicitly enabled the "apps-in-any-namespace" feature by setting `application.namespaces` in the argocd-cmd-params-cm ConfigMap or otherwise setting the `--application-namespaces` flags on the Application controller and API server components. The apps-in-any-namespace feature is in beta as of this Security Advisory's publish date. The bug is also limited to Argo CD instances where sharding is enabled by increasing the `replicas` count for the Application controller. Finally, the AppProjects' `sourceNamespaces` field acts as a secondary check against this exploit. To cause reconciliation of an Application in an out-of-bounds namespace, an AppProject must be available which permits Applications in the out-of-bounds namespace. A patch for this vulnerability has been released in versions 2.5.8 and 2.6.0-rc5. As a workaround, running only one replica of the Application controller will prevent exploitation of this bug. Making sure all AppProjects' sourceNamespaces are restricted within the confines of the configured Application namespaces will also prevent exploitation of this bug.
CVSS Score: 8.5 (HIGH)
CWE: CWE-862
References: https://github.com/argoproj/argo-cd/security/advisories/GHSA-6p4m-hw2h-6gmw; https://github.com/argoproj/argo-cd/security/advisories/GHSA-6p4m-hw2h-6gmw
CVE: CVE-2023-22739
Published: 2023-01-26
Description: Discourse is an open source platform for community discussion. Versions prior to 3.0.1 (stable), 3.1.0.beta2 (beta), and 3.1.0.beta2 (tests-passed) are subject to Allocation of Resources Without Limits or Throttling. As there is no limit on data contained in a draft, a malicious user can create an arbitrarily large draft, forcing the instance to a crawl. This issue is patched in versions 3.0.1 (stable), 3.1.0.beta2 (beta), and 3.1.0.beta2 (tests-passed). There are no workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/discourse/discourse/security/advisories/GHSA-rqgr-g6v7-jcfc; https://github.com/discourse/discourse/security/advisories/GHSA-rqgr-g6v7-jcfc
CVE: CVE-2023-22971
Published: 2023-01-26
Description: Cross Site Scripting (XSS) vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN9460 v8.2.0.48, and HN7000S v6.9.0.37, allows unauthenticated attackers to misuse frames, include JS/HTML code and steal sensitive information from legitimate users of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.hughes.com; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5743.php; https://www.hughes.com
CVE: CVE-2023-23151
Published: 2023-01-26
Description: bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404
References: https://github.com/alexlang24/bloofoxCMS/issues/17; https://github.com/alexlang24/bloofoxCMS/issues/17
CVE: CVE-2023-23608
Published: 2023-01-26
Description: Spotipy is a light weight Python library for the Spotify Web API. In versions prior to 2.22.1, if a malicious URI is passed to the library, the library can be tricked into performing an operation on a different API endpoint than intended. The code Spotipy uses to parse URIs and URLs allows an attacker to insert arbitrary characters into the path that is used for API requests. Because it is possible to include "..", an attacker can redirect for example a track lookup via spotifyApi.track() to an arbitrary API endpoint like playlists, but this is possible for other endpoints as well. The impact of this vulnerability depends heavily on what operations a client application performs when it handles a URI from a user and how it uses the responses it receives from the API. This issue is patched in version 2.22.1.
CVSS Score: 0.0 (NONE)
CWE: CWE-22, CWE-22
References: https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-q764-g6fm-555v; https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-q764-g6fm-555v
CVE: CVE-2023-23609
Published: 2023-01-26
Description: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol (BLE-L2CAP) module handles fragmentation of packets up the configured MTU size. When fragments are reassembled, they are stored in a packet buffer of a configurable size, but there is no check to verify that the packet buffer is large enough to hold the reassembled packet. In Contiki-NG's default configuration, it is possible that an out-of-bounds write of up to 1152 bytes occurs. The vulnerability has been patched in the "develop" branch of Contiki-NG, and will be included in release 4.9. The problem can be fixed by applying the patch in Contiki-NG pull request #2254 prior to the release of version 4.9.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://github.com/contiki-ng/contiki-ng/pull/2254; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-qr4q-6h3m-h3g7; https://github.com/contiki-ng/contiki-ng/pull/2254
CVE: CVE-2023-23610
Published: 2023-01-26
Description: GLPI is a Free Asset and IT Management Software package. Versions prior to 9.5.12 and 10.0.6 are vulnerable to Improper Privilege Management. Any user having access to the standard interface can export data of almost any GLPI item type, even those on which user is not allowed to access (including assets, tickets, users, ...). This issue is patched in 10.0.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269, CWE-732
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-6565-hm87-24hf; https://github.com/glpi-project/glpi/security/advisories/GHSA-6565-hm87-24hf
CVE: CVE-2023-23611
Published: 2023-01-26
Description: LTI Consumer XBlock implements the consumer side of the LTI specification enabling integration of third-party LTI provider tools. Versions 7.0.0 and above, prior to 7.2.2, are vulnerable to Missing Authorization.  Any LTI tool that is integrated with on the Open edX platform can post a grade back for any LTI XBlock so long as it knows or can guess the block location for that XBlock. An LTI tool submits scores to the edX platform for line items. The code that uploads that score to the LMS grade tables determines which XBlock to upload the grades for by reading the resource_link_id field of the associated line item. The LTI tool may submit any value for the resource_link_id field, allowing a malicious LTI tool to submit scores for any LTI XBlock on the platform. The impact is a loss of integrity for LTI XBlock grades. This issue is patched in 7.2.2. No workarounds exist.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87; https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87