deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-4275
Published: 2022-12-21
Description: A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is 974f21aa1b2527ef39c8afe1a[PII_REDACTED]deca8. It is recommended to apply a patch to fix this issue. VDB-216498 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-352
References: https://github.com/katlings/pyambic-pentameter/commit/974f21aa1b2527ef39c8afe1a[PII_REDACTED]deca8; https://vuldb.com/?id.216498; https://github.com/katlings/pyambic-pentameter/commit/974f21aa1b2527ef39c8afe1a[PII_REDACTED]deca8
CVE: CVE-2022-4637
Published: 2022-12-21
Description: A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this issue. The name of the patch is ef49e709c8adecc3a83cdc6164a67162991d2213. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216495.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/tkrebs/ep3-bs/commit/ef49e709c8adecc3a83cdc6164a67162991d2213; https://github.com/tkrebs/ep3-bs/issues/564; https://github.com/tkrebs/ep3-bs/releases/tag/1.8.0
CVE: CVE-2022-4638
Published: 2022-12-21
Description: A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 5da36305ca7ed433782be8901c47387406fcda12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216496.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/collective/collective.contact.widget/commit/5da36305ca7ed433782be8901c47387406fcda12; https://vuldb.com/?id.216496; https://github.com/collective/collective.contact.widget/commit/5da36305ca7ed433782be8901c47387406fcda12
CVE: CVE-2022-4639
Published: 2022-12-21
Description: A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msg_info leads to format string. The attack may be initiated remotely. The name of the patch is b19f8a6046b080e4c2e28354a58556bb26040c6f. It is recommended to apply a patch to fix this issue. The identifier VDB-216497 was assigned to this vulnerability.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-119, CWE-134
References: https://github.com/yrutschle/sslh/commit/b19f8a6046b080e4c2e28354a58556bb26040c6f; https://github.com/yrutschle/sslh/pull/353; https://vuldb.com/?id.216497
CVE: CVE-2022-4640
Published: 2022-12-21
Description: A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.
CVSS Score: 3.5 (LOW)
CWE: CWE-707
References: https://gitee.com/mingSoft/MCMS/issues/I65KI5; https://vuldb.com/?id.216499; https://gitee.com/mingSoft/MCMS/issues/I65KI5
CVE: CVE-2022-4641
Published: 2022-12-21
Description: A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. The name of the patch is 1e7bd9fab5401a2df18d2eabd802adcf0dcf1f15. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216500.
CVSS Score: 2.5 (LOW)
CWE: CWE-377
References: https://github.com/tdunning/pig-vector/commit/1e7bd9fab5401a2df18d2eabd802adcf0dcf1f15; https://github.com/tdunning/pig-vector/pull/2; https://vuldb.com/?id.216500
CVE: CVE-2022-4642
Published: 2022-12-21
Description: A vulnerability was found in tatoeba2. It has been classified as problematic. This affects an unknown part of the component Profile Name Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version prod_2022-10-30 is able to address this issue. The name of the patch is 91110777fc8ddf1b4a2cf4e66e67db69b9700361. It is recommended to upgrade the affected component. The identifier VDB-216501 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/Tatoeba/tatoeba2/commit/91110777fc8ddf1b4a2cf4e66e67db69b9700361; https://github.com/Tatoeba/tatoeba2/issues/3002; https://github.com/Tatoeba/tatoeba2/releases/tag/prod_2022-10-30
CVE: CVE-2022-4643
Published: 2022-12-21
Description: A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdf_ocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to version 1.2.1 is able to address this issue. The name of the patch is b19021ade3d0b71c89d35cb00eb9e589a121faa5. It is recommended to upgrade the affected component. VDB-216502 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://github.com/sajari/docconv/commit/b19021ade3d0b71c89d35cb00eb9e589a121faa5; https://github.com/sajari/docconv/pull/110; https://github.com/sajari/docconv/releases/tag/v1.2.1
CVE: CVE-2022-3183
Published: 2022-12-21
Description: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability. 




CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
CVE: CVE-2022-3184
Published: 2022-12-21
Description: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot directory.

 




CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
CVE: CVE-2022-3185
Published: 2022-12-21
Description: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensitive data concerning the device.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
CVE: CVE-2022-3186
Published: 2022-12-21
Description: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other device's information.


CVSS Score: 8.6 (HIGH)
CWE: CWE-284
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
CVE: CVE-2022-3187
Published: 2022-12-21
Description: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of verification to read the state of outlets. 




CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
CVE: CVE-2022-3188
Published: 2022-12-21
Description: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the latest actions completed by specific users.

 




CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
CVE: CVE-2022-3189
Published: 2022-12-21
Description: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request to create a URL capable of changing the host parameter. The changed host parameter in the HTTP could point to another host that will send a request to the host or IP specified in the changed host parameter.



 




CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
CVE: CVE-2022-4644
Published: 2022-12-22
Description: Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368; https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0; https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368
CVE: CVE-2021-36631
Published: 2022-12-22
Description: Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://github.com/shigophilo/CVE/blob/main/Baidunetdisk%20Version%207.4.3%20dll%20hijack.md; https://github.com/shigophilo/CVE/blob/main/Baidunetdisk%20Version%207.4.3%20dll%20hijack.md
CVE: CVE-2021-43657
Published: 2022-12-22
Description: A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SCMS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/c0n5n3d/CVE-2021-43657/blob/main/Info.txt; https://github.com/c0n5n3d/CVE-2021-43657/blob/main/Info.txt
CVE: CVE-2022-43271
Published: 2022-12-22
Description: Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerability via the User profile component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/SecurityWillCheck/CVE-2022-43271; https://inhabit.com.au/CVE-2022-43271; https://github.com/SecurityWillCheck/CVE-2022-43271
CVE: CVE-2022-4646
Published: 2022-12-22
Description: Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398; https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10; https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398
CVE: CVE-2022-4647
Published: 2022-12-22
Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/20df56615e61624f5fff[PII_REDACTED]9e4b3b936; https://huntr.dev/bounties/ccdd243d-726c-4199-b742-25c571491242; https://github.com/microweber/microweber/commit/20df56615e61624f5fff[PII_REDACTED]9e4b3b936
CVE: CVE-2022-25948
Published: 2022-12-22
Description: The package liquidjs before 10.0.0 are vulnerable to Information Exposure when ownPropertyOnly parameter is set to False, which results in leaking properties of a prototype. Workaround For versions 9.34.0 and higher, an option to disable this functionality is provided.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/harttle/liquidjs/commit/7e99efc5131e20cf3f59e1fc2c371a15aa4109db; https://github.com/harttle/liquidjs/commit/7eb621601c2b05d6e379e5ce42219f2b1f556208; https://github.com/harttle/liquidjs/issues/454
CVE: CVE-2020-36624
Published: 2022-12-22
Description: A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/text_helpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The attack can be initiated remotely. Upgrading to version 1.1.0 is able to address this issue. The name of the patch is 184b60ded0e43c985788582aca2d1e746f9405a3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216520.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-1022
References: https://github.com/ahorner/text-helpers/commit/184b60ded0e43c985788582aca2d1e746f9405a3; https://github.com/ahorner/text-helpers/pull/19; https://github.com/ahorner/text-helpers/releases/tag/v1.1.0
CVE: CVE-2020-36625
Published: 2022-12-22
Description: A vulnerability was found in destiny.gg chat. It has been rated as problematic. This issue affects the function websocket.Upgrader of the file main.go. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The name of the patch is bebd256fc3063111fb4503ca25e005ebf6e73780. It is recommended to apply a patch to fix this issue. The identifier VDB-216521 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-352
References: https://github.com/destinygg/chat/commit/bebd256fc3063111fb4503ca25e005ebf6e73780; https://github.com/destinygg/chat/pull/35; https://vuldb.com/?id.216521
CVE: CVE-2022-41654
Published: 2022-12-22
Description: An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to increased privileges. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/TryGhost/Ghost/security/advisories/GHSA-9gh8-wp53-ccc6; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1624; https://github.com/TryGhost/Ghost/security/advisories/GHSA-9gh8-wp53-ccc6
CVE: CVE-2022-41697
Published: 2022-12-22
Description: A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1625; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1625
CVE: CVE-2022-45347
Published: 2022-12-22
Description: Apache ShardingSphere-Proxy prior to 5.3.0 when using MySQL as database backend didn't cleanup the database session completely after client authentication failed, which allowed an attacker to execute normal commands by constructing a special MySQL client. This vulnerability has been fixed in Apache ShardingSphere 5.3.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-459
References: https://lists.apache.org/thread/l5rz7j4rg10o7ywtgknh2f5hxnv6yw3l; https://lists.apache.org/thread/l5rz7j4rg10o7ywtgknh2f5hxnv6yw3l
CVE: CVE-2022-47895
Published: 2022-12-22
Description: In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-47896
Published: 2022-12-22
Description: In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-1336, CWE-94
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-45966
Published: 2022-12-22
Description: here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/yinfei6/classcms; https://github.com/yinfei6/classcms
CVE: CVE-2022-4516
Published: 2022-12-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.
CVE: CVE-2022-44510
Published: 2022-12-22
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-23541
Published: 2022-12-22
Description: jsonwebtoken is an implementation of JSON Web Tokens. Versions `<= 8.5.1` of `jsonwebtoken` library can be misconfigured so that passing a poorly implemented key retrieval function referring to the `secretOrPublicKey` argument from the readme link will result in incorrect verification of tokens. There is a possibility of using a different algorithm and key combination in verification, other than the one that was used to sign the tokens. Specifically, tokens signed with an asymmetric public key could be verified with a symmetric HS256 algorithm. This can lead to successful validation of  forged tokens. If your application is supporting usage of both symmetric key and asymmetric key in jwt.verify() implementation with the same key retrieval function. This issue has been patched, please update to version 9.0.0.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287, CWE-1259
References: https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3; https://github.com/auth0/node-jsonwebtoken/releases/tag/v9.0.0; https://github.com/auth0/node-jsonwebtoken/security/advisories/GHSA-hjrf-2m68-5959
CVE: CVE-2022-46101
Published: 2022-12-22
Description: AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/loadream/AyaCMS/issues/6; https://github.com/loadream/AyaCMS/issues/6
CVE: CVE-2022-46102
Published: 2022-12-22
Description: AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/loadream/AyaCMS/issues/7; https://github.com/loadream/AyaCMS/issues/7
CVE: CVE-2022-47926
Published: 2022-12-22
Description: AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88, CWE-88
References: https://github.com/loadream/AyaCMS/issues/7; https://github.com/loadream/AyaCMS/issues/7
CVE: CVE-2022-23540
Published: 2022-12-22
Description: In versions `<=8.5.1` of `jsonwebtoken` library, lack of algorithm definition in the `jwt.verify()` function can lead to signature validation bypass due to defaulting to the `none` algorithm for signature verification. Users are affected if you do not specify algorithms in the `jwt.verify()` function. This issue has been fixed, please update to version 9.0.0 which removes the default support for the none algorithm in the `jwt.verify()` method. There will be no impact, if you update to version 9.0.0 and you don’t need to allow for the `none` algorithm. If you need 'none' algorithm, you have to explicitly specify that in `jwt.verify()` options.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-287, CWE-347
References: https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3; https://github.com/auth0/node-jsonwebtoken/security/advisories/GHSA-qwph-4952-7xr6; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-23556
Published: 2022-12-22
Description: CodeIgniter is a PHP full-stack web framework. This vulnerability may allow attackers to spoof their IP address when the server is behind a reverse proxy. This issue has been patched, please upgrade to version 4.2.11 or later, and configure `Config\App::$proxyIPs`. As a workaround, do not use `$request->getIPAddress()`.

CVSS Score: 7.0 (HIGH)
CWE: CWE-345
References: https://github.com/codeigniter4/CodeIgniter4/commit/5ca8c99b2db09a2a08a[PII_REDACTED]28ddc984659; https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-ghw3-5qvm-3mqc; https://github.com/codeigniter4/CodeIgniter4/commit/5ca8c99b2db09a2a08a[PII_REDACTED]28ddc984659
CVE: CVE-2022-46170
Published: 2022-12-22
Description: CodeIgniter is a PHP full-stack web framework. When an application uses (1) multiple session cookies (e.g., one for user pages and one for admin pages) and (2)  a session handler is set to `DatabaseHandler`, `MemcachedHandler`, or `RedisHandler`, then if an attacker gets one session cookie (e.g., one for user pages), they may be able to access pages that require another session cookie (e.g., for admin pages). This issue has been patched, please upgrade to version 4.2.11 or later. As a workaround, use only one session cookie.
CVSS Score: 8.6 (HIGH)
CWE: CWE-287
References: https://github.com/codeigniter4/CodeIgniter4/commit/f9fb6574fbeb5a4aa63f7ea87296523e10db9328; https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-6cq5-8cj7-g558; https://github.com/codeigniter4/CodeIgniter4/commit/f9fb6574fbeb5a4aa63f7ea87296523e10db9328
CVE: CVE-2020-15679
Published: 2022-12-22
Description: An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that URL, and obtain authenticated access as that user. This issue is limited to cases where attacker and victim are sharing the same source IP and could allow the ability to view session states and disconnect VPN sessions. This vulnerability affects Mozilla VPN iOS 1.0.7 < (929), Mozilla VPN Windows < 1.2.2, and Mozilla VPN Android 1.1.0 < (1360).
CVSS Score: 7.6 (HIGH)
CWE: CWE-384, CWE-384
References: https://github.com/mozilla-mobile/guardian-vpn-android/commit/981c840276ef3aee98cf5d42993d484ee99b28d9; https://github.com/mozilla-mobile/guardian-vpn-ios/commit/4309f5c9bd2c15cdfd39ac173665fad3f2598b54; https://github.com/mozilla-services/guardian-vpn-windows/commit/ac6f562973a83f6758cd7ab7aa313e863047d41b
CVE: CVE-2020-15685
Published: 2022-12-22
Description: During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1622640; https://www.mozilla.org/security/advisories/mfsa2021-05/; https://bugzilla.mozilla.org/show_bug.cgi?id=1622640