deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-35763
Published: 2022-08-09
Description: Storage Spaces Direct Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35763; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35763
CVE: CVE-2022-35764
Published: 2022-08-09
Description: Storage Spaces Direct Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35764; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35764
CVE: CVE-2022-35765
Published: 2022-08-09
Description: Storage Spaces Direct Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35765; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35765
CVE: CVE-2022-35766
Published: 2022-08-09
Description: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35766; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35766
CVE: CVE-2022-35767
Published: 2022-08-09
Description: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35767; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35767
CVE: CVE-2022-35768
Published: 2022-08-09
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35768; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35768
CVE: CVE-2022-35769
Published: 2022-08-09
Description: Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35769; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35769
CVE: CVE-2022-35771
Published: 2022-08-09
Description: Windows Defender Credential Guard Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35771; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35771
CVE: CVE-2022-35772
Published: 2022-08-09
Description: Azure Site Recovery Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35772; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35772
CVE: CVE-2022-35773
Published: 2022-08-09
Description: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35773; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35773
CVE: CVE-2022-35774
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35774; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35774
CVE: CVE-2022-35775
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35775; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35775
CVE: CVE-2022-35776
Published: 2022-08-09
Description: Azure Site Recovery Denial of Service Vulnerability
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35776; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35776
CVE: CVE-2022-35777
Published: 2022-08-09
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35777; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35777
CVE: CVE-2022-35779
Published: 2022-08-09
Description: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35779; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35779
CVE: CVE-2022-35780
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35780; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35780
CVE: CVE-2022-35781
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35781; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35781
CVE: CVE-2022-35782
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35782; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35782
CVE: CVE-2022-35783
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.4 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35783; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35783
CVE: CVE-2022-35784
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35784; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35784
CVE: CVE-2022-35785
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35785; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35785
CVE: CVE-2022-35786
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35786; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35786
CVE: CVE-2022-35787
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35787; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35787
CVE: CVE-2022-35788
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35788; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35788
CVE: CVE-2022-35789
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35789; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35789
CVE: CVE-2022-35790
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35790; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35790
CVE: CVE-2022-35791
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35791; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35791
CVE: CVE-2022-35792
Published: 2022-08-09
Description: Storage Spaces Direct Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35792; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35792
CVE: CVE-2022-35793
Published: 2022-08-09
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35793; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35793
CVE: CVE-2022-35794
Published: 2022-08-09
Description: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35794; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35794
CVE: CVE-2022-35795
Published: 2022-08-09
Description: Windows Error Reporting Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35795; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35795
CVE: CVE-2022-35796
Published: 2022-08-09
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35796; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35796
CVE: CVE-2022-35797
Published: 2022-08-09
Description: Windows Hello Security Feature Bypass Vulnerability
CVSS Score: 6.1 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35797; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35797
CVE: CVE-2022-35799
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35799; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35799
CVE: CVE-2022-35800
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35800; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35800
CVE: CVE-2022-35801
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35801; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35801
CVE: CVE-2022-35802
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35802; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35802
CVE: CVE-2022-35804
Published: 2022-08-09
Description: SMB Client and Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35804; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35804
CVE: CVE-2022-35806
Published: 2022-08-09
Description: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35806; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35806
CVE: CVE-2022-35807
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35807; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35807
CVE: CVE-2022-35808
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35808; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35808
CVE: CVE-2022-35809
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35809; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35809
CVE: CVE-2022-35810
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35810; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35810
CVE: CVE-2022-35811
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35811; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35811
CVE: CVE-2022-35812
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812
CVE: CVE-2022-35813
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35813; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35813
CVE: CVE-2022-35814
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35814; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35814
CVE: CVE-2022-35815
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35815; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35815
CVE: CVE-2022-35816
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35816; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35816
CVE: CVE-2022-35817
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35817; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35817
CVE: CVE-2022-35818
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35818; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35818
CVE: CVE-2022-35819
Published: 2022-08-09
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35819; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35819
CVE: CVE-2022-35820
Published: 2022-08-09
Description: Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35820; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35820
CVE: CVE-2022-35821
Published: 2022-08-09
Description: Azure Sphere Information Disclosure Vulnerability
CVSS Score: 4.4 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35821; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35821
CVE: CVE-2022-35824
Published: 2022-08-09
Description: Azure Site Recovery Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35824; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35824
CVE: CVE-2022-35825
Published: 2022-08-09
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35825; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35825
CVE: CVE-2022-35826
Published: 2022-08-09
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35826; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35826
CVE: CVE-2022-35827
Published: 2022-08-09
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35827; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35827
CVE: CVE-2022-29083
Published: 2022-08-09
Description: Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.dell.com/support/kbdoc/000201396; https://www.dell.com/support/kbdoc/000201396
CVE: CVE-2022-36801
Published: 2022-08-10
Description: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-73740; https://jira.atlassian.com/browse/JRASERVER-73740
CVE: CVE-2022-25973
Published: 2022-08-10
Description: All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88
References: https://security.snyk.io/vuln/SNYK-JS-MCKILLPORT-2419070; https://www.npmjs.com/package/mc-kill-port; https://security.snyk.io/vuln/SNYK-JS-MCKILLPORT-2419070
CVE: CVE-2021-37150
Published: 2022-08-10
Description: Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to request secure resources. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21; https://lists.debian.org/debian-lts-announce/2023/01/msg00019.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJ67IWD5PRJUOIYIDJRUG3UMS2UF4X4J/
CVE: CVE-2022-25763
Published: 2022-08-10
Description: Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444, CWE-444
References: https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJ67IWD5PRJUOIYIDJRUG3UMS2UF4X4J/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCSBQBYPOZSWS5LCOAQ6LJLRLXFIAW5A/
CVE: CVE-2022-28129
Published: 2022-08-10
Description: Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21; https://lists.debian.org/debian-lts-announce/2023/01/msg00019.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJ67IWD5PRJUOIYIDJRUG3UMS2UF4X4J/
CVE: CVE-2022-31778
Published: 2022-08-10
Description: Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21; https://lists.debian.org/debian-lts-announce/2023/04/msg00007.html; https://www.debian.org/security/2022/dsa-5206
CVE: CVE-2022-31779
Published: 2022-08-10
Description: Improper Input Validation vulnerability in HTTP/2 header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJ67IWD5PRJUOIYIDJRUG3UMS2UF4X4J/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCSBQBYPOZSWS5LCOAQ6LJLRLXFIAW5A/
CVE: CVE-2022-31780
Published: 2022-08-10
Description: Improper Input Validation vulnerability in HTTP/2 frame handling of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21; https://lists.debian.org/debian-lts-announce/2023/01/msg00019.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJ67IWD5PRJUOIYIDJRUG3UMS2UF4X4J/
CVE: CVE-2022-20841
Published: 2022-08-10
Description: Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-120, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-mult-vuln-CbVp4SUR; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-mult-vuln-CbVp4SUR
CVE: CVE-2022-20792
Published: 2022-08-10
Description: A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load time, and possibly gain code execution. The vulnerability is due to improper bounds checking that may result in a multi-byte heap buffer overwflow write. An attacker could exploit this vulnerability by placing a crafted CDB ClamAV signature database file in the ClamAV database directory. An exploit could allow the attacker to run code as the clamav user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html; https://security.gentoo.org/glsa/202310-01; https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
CVE: CVE-2022-20816
Published: 2022-08-10
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This vulnerability exists because the affected software does not properly validate HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker to delete arbitrary files from the affected system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-file-delete-N2VPmOnE; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-file-delete-N2VPmOnE