deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30322
Published: 2022-05-25
Description: go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses. Fixed in 1.6.1 and 2.1.0.
CVSS Score: 8.6 (HIGH)
References: https://discuss.hashicorp.com; https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/; https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930
CVE: CVE-2022-30323
Published: 2022-05-25
Description: go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files. Fixed in 1.6.1 and 2.1.0.
CVSS Score: 8.6 (HIGH)
References: https://discuss.hashicorp.com; https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/; https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930
CVE: CVE-2022-30595
Published: 2022-05-25
Description: libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/python-pillow/Pillow/blob/main/src/libImaging/TgaRleDecode.c; https://pillow.readthedocs.io/en/stable/releasenotes/9.1.1.html; https://github.com/python-pillow/Pillow/blob/main/src/libImaging/TgaRleDecode.c
CVE: CVE-2022-1851
Published: 2022-05-25
Description: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/78d52883e10d71f23ab72a3d8b9733b00da8c9ad
CVE: CVE-2022-29379
Published: 2022-05-25
Description: Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2, 0.7.3, or 0.7.4 release
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/nginx/njs/commit/ab1702c7af9959366a5ddc4a75b4357d4e9ebdc1; https://github.com/nginx/njs/issues/491; https://github.com/nginx/njs/issues/493
CVE: CVE-2022-29650
Published: 2022-05-25
Description: Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://hackmd.io/%40d4rkp0w4r/Online_Food_Ordering_System_Unauthenticated_Sql_Injection; https://hackmd.io/%40d4rkp0w4r/Online_Food_Ordering_System_Unauthenticated_Sql_Injection
CVE: CVE-2022-29651
Published: 2022-05-25
Description: An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://hackmd.io/%40d4rkp0w4r/Online_Food_Ordering_System_Remote_Code_Execution; https://hackmd.io/%40d4rkp0w4r/Online_Food_Ordering_System_Remote_Code_Execution
CVE: CVE-2021-32966
Published: 2022-05-25
Description: Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDAP system credentials.
CVSS Score: 3.7 (LOW)
CWE: CWE-319
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-175-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-175-01
CVE: CVE-2021-32989
Published: 2022-05-25
Description: When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-04; https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-04
CVE: CVE-2021-32997
Published: 2022-05-25
Description: The affected Baker Hughes Bentley Nevada products (3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01 versions 5.05 and prior) utilize a weak encryption algorithm for storage and transmission of sensitive data, which may allow an attacker to more easily obtain credentials used for access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-916
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-231-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-231-02
CVE: CVE-2021-35487
Published: 2022-05-25
Description: Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates (for the Manage Alerts page) via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user, database name, and database version information, and potentially database data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.nokia.com/notices/responsible-disclosure/; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-22127
Published: 2022-05-25
Description: Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers using Local Identity Store for managing users. The vulnerability allows a malicious site administrator to change passwords for users in different sites hosted on the same Tableau Server, resulting in the potential for unauthorized access to data.Tableau Server versions affected are:2020.4.16, 2021.1.13, 2021.2.10, 2021.3.9, 2021.4.4 and earlierNote: All future releases of Tableau Server will address this security issue. Versions that are no longer supported are not tested and may be vulnerable.
CVSS Score: 7.2 (HIGH)
References: https://help.salesforce.com/s/articleView?id=000365493&type=1; https://help.salesforce.com/s/articleView?id=000365493&type=1
CVE: CVE-2022-29380
Published: 2022-05-25
Description: Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49298; https://www.exploit-db.com/exploits/49298
CVE: CVE-2022-1678
Published: 2022-05-25
Description: An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-911
References: https://anas.openanolis.cn/cves/detail/CVE-2022-1678; https://anas.openanolis.cn/errata/detail/ANSA-2022:0143; https://bugzilla.openanolis.cn/show_bug.cgi?id=61
CVE: CVE-2021-44719
Published: 2022-05-25
Description: Docker Desktop 4.3.0 has Incorrect Access Control.
CVSS Score: 8.4 (HIGH)
References: https://docs.docker.com/desktop/mac/release-notes/; https://docs.docker.com/desktop/release-notes/#security-2; https://docs.docker.com/desktop/windows/release-notes/
CVE: CVE-2022-1348
Published: 2022-05-25
Description: A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732, CWE-732, CWE-732
References: http://www.openwall.com/lists/oss-security/2022/05/25/3; http://www.openwall.com/lists/oss-security/2022/05/25/4; http://www.openwall.com/lists/oss-security/2022/05/25/5
CVE: CVE-2022-23775
Published: 2022-05-25
Description: TrueStack Direct Connect 1.4.7 has Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
References: https://truestack.com/support/; https://truestack.com/ufaqs/cve-2022-23775-vulnerability-upgrade-to-1-4-10-or-higher-to-fix/; https://truestack.com/support/
CVE: CVE-2022-27305
Published: 2022-05-25
Description: Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384
References: http://gibbon.com; http://gibbonedu.com; https://github.com/GibbonEdu/core/security/advisories/GHSA-4mq5-8jvh-qq3p
CVE: CVE-2022-28875
Published: 2022-05-25
Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://www.f-secure.com/en/business/support-and-downloads/security-advisories; https://www.withsecure.com/en/support/security-advisories; https://www.f-secure.com/en/business/support-and-downloads/security-advisories
CVE: CVE-2022-29408
Published: 2022-05-25
Description: Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/advanced-cf7-db/wordpress-advanced-contact-form-7-db-plugin-1-8-7-persistent-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/advanced-cf7-db/; https://patchstack.com/database/vulnerability/advanced-cf7-db/wordpress-advanced-contact-form-7-db-plugin-1-8-7-persistent-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-30427
Published: 2022-05-25
Description: In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/gphper/ginadmin/issues/8; https://github.com/gphper/ginadmin/issues/8
CVE: CVE-2022-30428
Published: 2022-05-25
Description: In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://github.com/gphper/ginadmin/issues/9; https://github.com/gphper/ginadmin/issues/9
CVE: CVE-2021-27779
Published: 2022-05-25
Description: VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-311, CWE-311
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098165; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098165
CVE: CVE-2021-27783
Published: 2022-05-25
Description: User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-311, CWE-311
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098586; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098586
CVE: CVE-2022-29248
Published: 2022-05-25
Description: Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the domain of the server which sets the cookie via the Set-Cookie header, allowing a malicious server to set cookies for unrelated domains. The cookie middleware is disabled by default, so most library consumers will not be affected by this issue. Only those who manually add the cookie middleware to the handler stack or construct the client with ['cookies' => true] are affected. Moreover, those who do not use the same Guzzle client to call multiple domains and have disabled redirect forwarding are not affected by this vulnerability. Guzzle versions 6.5.6 and 7.4.3 contain a patch for this issue. As a workaround, turn off the cookie middleware.
CVSS Score: 8.0 (HIGH)
CWE: CWE-200, CWE-565
References: https://github.com/guzzle/guzzle/commit/74a8602c6faec9ef74b7a9391ac82c5e65b1cdab; https://github.com/guzzle/guzzle/pull/3018; https://github.com/guzzle/guzzle/security/advisories/GHSA-cwmx-hcrq-mhc3
CVE: CVE-2022-29402
Published: 2022-05-25
Description: TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-306
References: https://k4m1ll0.com/cve-tplink-tlwr840N-uart-shell.html; https://k4m1ll0.com/cve-tplink-tlwr840N-uart-shell.html
CVE: CVE-2022-26026
Published: 2022-05-25
Description: A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to loss of communications. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1491; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1491
CVE: CVE-2022-26043
Published: 2022-05-25
Description: An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of a custom Security Group. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1489; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1489
CVE: CVE-2022-26067
Published: 2022-05-25
Description: An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to arbitrary file read. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1492; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1492
CVE: CVE-2022-26077
Published: 2022-05-25
Description: A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1490; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1490
CVE: CVE-2022-26082
Published: 2022-05-25
Description: A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1493; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1493
CVE: CVE-2022-26303
Published: 2022-05-25
Description: An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of an OAS user account. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1488; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1488
CVE: CVE-2022-26833
Published: 2022-05-25
Description: An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this vulnerability.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1513; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1513
CVE: CVE-2022-27169
Published: 2022-05-25
Description: An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1494; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1494
CVE: CVE-2022-29251
Published: 2022-05-25
Description: XWiki Platform Flamingo Theme UI is a tool that allows customization and preview of any Flamingo-based skin. Starting with versions 6.2.4 and 6.3-rc-1, a possible cross-site scripting vector is present in the `FlamingoThemesCode.WebHomeSheet` wiki page related to the "newThemeName" form field. The issue is patched in versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3. The easiest available workaround is to edit the wiki page `FlamingoThemesCode.WebHomeSheet` (with wiki editor) according to the suggestion provided in the GitHub Security Advisory.
CVSS Score: 7.4 (HIGH)
CWE: CWE-80, CWE-116, CWE-79
References: https://github.com/xwiki/xwiki-platform/commit/bd935320bee3c27cf7548351b1d0f935f116d437; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vmhh-xh3g-j992; https://jira.xwiki.org/browse/XWIKI-19294
CVE: CVE-2022-29252
Published: 2022-05-25
Description: XWiki Platform Wiki UI Main Wiki is a package for managing subwikis. Starting with version 5.3-milestone-2, XWiki Platform Wiki UI Main Wiki contains a possible cross-site scripting vector in the `WikiManager.JoinWiki ` wiki page related to the "requestJoin" field. The issue is patched in versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3. The easiest available workaround is to edit the wiki page `WikiManager.JoinWiki` (with wiki editor) according to the suggestion provided in the GitHub Security Advisory.
CVSS Score: 7.4 (HIGH)
CWE: CWE-80, CWE-116, CWE-79
References: https://github.com/xwiki/xwiki-platform/commit/27f839133d41877e538d35fa88274b50a1c00b9b; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-ph5x-h23x-7q5q; https://jira.xwiki.org/browse/XWIKI-19292
CVE: CVE-2022-29253
Published: 2022-05-25
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with version 8.3-rc-1 and prior to versions 12.10.3 and 14.0, one can ask for any file located in the classloader using the template API and a path with ".." in it. The issue is patched in versions 14.0 and 13.10.3. There is no easy workaround for this issue.
CVSS Score: 2.7 (LOW)
CWE: CWE-22, CWE-24, CWE-22
References: https://github.com/xwiki/xwiki-platform/commit/4917c8f355717bb636d763844528b1fe0f95e8e2; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9qrp-h7fw-42hg; https://jira.xwiki.org/browse/XWIKI-19349
CVE: CVE-2022-31620
Published: 2022-05-25
Description: In libjpeg before 1.64, BitStream<false>::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/thorfdbg/libjpeg/commit/ef4a29a62ab48b8dc235f4af52cfd6319eda9a6a; https://github.com/thorfdbg/libjpeg/issues/70; https://github.com/thorfdbg/libjpeg/commit/ef4a29a62ab48b8dc235f4af52cfd6319eda9a6a
CVE: CVE-2022-31621
Published: 2022-05-25
Description: MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://github.com/MariaDB/server/commit/b1351c15946349f9daa7e5297fb2ac6f3139e4a8; https://jira.mariadb.org/browse/MDEV-26561; https://jira.mariadb.org/browse/MDEV-26574
CVE: CVE-2022-31622
Published: 2022-05-25
Description: MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://github.com/MariaDB/server/commit/e1eb39a446c30b8459c39fd7f2ee1c55a36e97d2; https://jira.mariadb.org/browse/MDEV-26561; https://jira.mariadb.org/browse/MDEV-26561?filter=-2
CVE: CVE-2022-31623
Published: 2022-05-25
Description: MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://github.com/MariaDB/server/commit/7c30bc38a588b22b01f11130cfe99e7f36accf94; https://github.com/MariaDB/server/pull/1938; https://jira.mariadb.org/browse/MDEV-26561
CVE: CVE-2022-31624
Published: 2022-05-25
Description: MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://github.com/MariaDB/server/commit/d627d00b13ab2f2c0954ea7b77202470cb102944; https://jira.mariadb.org/browse/MDEV-26556?filter=-2; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-29256
Published: 2022-05-25
Description: sharp is an application for Node.js image processing. Prior to version 0.30.5, there is a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. If an attacker has the ability to set the value of the `PKG_CONFIG_PATH` environment variable in a build environment then they might be able to use this to inject an arbitrary command at `npm install` time. This is not part of any runtime code, does not affect Windows users at all, and is unlikely to affect anyone that already cares about the security of their build environment. This problem is fixed in version 0.30.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://github.com/lovell/sharp/commit/a6aeef612be50f5868a77481848b1de674216f0c; https://github.com/lovell/sharp/security/advisories/GHSA-gp95-ppv5-3jc5; https://github.com/lovell/sharp/commit/a6aeef612be50f5868a77481848b1de674216f0c
CVE: CVE-2022-31650
Published: 2022-05-25
Description: In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-697
References: http://www.openwall.com/lists/oss-security/2023/02/03/3; https://lists.debian.org/debian-lts-announce/2023/02/msg00009.html; https://sourceforge.net/p/sox/bugs/360/