deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-32441
Published: 2022-07-07
Description: A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service (DoS) via a crafted file. Related to Data from Faulting Address controls subsequent Write Address starting at msvcrt!memcpy+0x[PII_REDACTED]000056.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://code610.blogspot.com/2022/06/night-fuzzing-session-idapro-66-part-2.html; https://code610.blogspot.com/2022/06/night-fuzzing-session-idapro-66-part-2.html
CVE: CVE-2014-0024
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-1926
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-2887
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-2895
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-3516
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-3588
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2015-5236
Published: 2022-07-07
Description: It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet's actual origin, this allowed malicious site to bypass SOP via spoofed codebase value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345, CWE-345
References: https://bugzilla.redhat.com/show_bug.cgi?id=1256403; https://bugzilla.redhat.com/show_bug.cgi?id=1256403
CVE: CVE-2021-46825
Published: 2022-07-07
Description: Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web server responses to unintended clients. Severity/CVSSv3: High / 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-444
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20638; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20638
CVE: CVE-2022-23744
Published: 2022-07-07
Description: Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.
CVSS Score: 2.3 (LOW)
CWE: CWE-470
References: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179609; https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179609
CVE: CVE-2014-3644
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-3658
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-3705
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-3918
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-7854
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2014-8113
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2022-31121
Published: 2022-07-07
Description: Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer it may crash the orderer node. A fix has been added in commit 0f1835949 which checks for missing consensus messages and returns an error to the consensus client should the message be missing. Users are advised to upgrade to versions 2.2.7 or v2.4.5. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/hyperledger/fabric/commit/0f18359493bcbd5f9f9d1a9b05adabfe5da23b06; https://github.com/hyperledger/fabric/releases/tag/v2.2.7; https://github.com/hyperledger/fabric/releases/tag/v2.4.5
CVE: CVE-2022-31133
Published: 2022-07-07
Description: HumHub is an Open Source Enterprise Social Network. Affected versions of HumHub are vulnerable to a stored Cross-Site Scripting (XSS) vulnerability. For exploitation, the attacker would need a permission to administer the Spaces feature. The names of individual "spaces" are not properly escaped and so an attacker with sufficient privilege could insert malicious javascript into a space name and exploit system users who visit that space. It is recommended that the HumHub is upgraded to 1.11.4, 1.10.5. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/humhub/humhub/commit/07d9f8f9b6334970ee38156a3416c3708d157cae; https://github.com/humhub/humhub/commit/f88991dfe56a05870df165ac89a2755dd4c1ffa1; https://github.com/humhub/humhub/security/advisories/GHSA-p7h3-73v7-959c
CVE: CVE-2022-31135
Published: 2022-07-07
Description: Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to a denial of service attack. An attacker can use a specially crafted evidence packet to make an illegal modification, causing a server crash. This can be used to mount a denial-of-service exploit. Users are advised to upgrade. There is no known workaround for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://github.com/AttorneyOnline/akashi/commit/5566cdfedddef1f219aee33477d9c9690bf2f78b; https://github.com/AttorneyOnline/akashi/security/advisories/GHSA-vj86-vfmg-q68v; https://github.com/AttorneyOnline/akashi/commit/5566cdfedddef1f219aee33477d9c9690bf2f78b
CVE: CVE-2022-31136
Published: 2022-07-07
Description: Bookwyrm is an open source social reading and reviewing program. Versions of Bookwyrm prior to 0.4.1 did not properly sanitize html being rendered to users. Unprivileged users are able to inject scripts into user profiles, book descriptions, and statuses. These vulnerabilities may be exploited as cross site scripting attacks on users viewing these fields. Users are advised to upgrade to version 0.4.1. There are no known workarounds for this issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/bookwyrm-social/bookwyrm/commit/fe33fdcf564a6a5667aef75d5456bea08feab50d; https://github.com/bookwyrm-social/bookwyrm/security/advisories/GHSA-2cfh-v7rf-pxfp; https://github.com/bookwyrm-social/bookwyrm/commit/fe33fdcf564a6a5667aef75d5456bea08feab50d
CVE: CVE-2015-5298
Published: 2022-07-07
Description: The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: http://exfiltrated.com/research-CVE-2015-5298.php; https://www.jenkins.io/security/advisory/2015-10-12/; http://exfiltrated.com/research-CVE-2015-5298.php
CVE: CVE-2021-31645
Published: 2022-07-07
Description: An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the connection limit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://glftpd.io/; https://www.exploit-db.com/exploits/49773; https://glftpd.io/
CVE: CVE-2021-44791
Published: 2022-07-07
Description: In Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.apache.org/thread/lh2kcl4j45q7xj4w6rqf6kwf0mvyp2o6; https://lists.apache.org/thread/lh2kcl4j45q7xj4w6rqf6kwf0mvyp2o6
CVE: CVE-2022-28889
Published: 2022-07-07
Description: In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://lists.apache.org/thread/t3nsq4crdr8wqgmj721d2wg6pf26s5cw; https://lists.apache.org/thread/t3nsq4crdr8wqgmj721d2wg6pf26s5cw
CVE: CVE-2022-32054
Published: 2022-07-07
Description: Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/winmt/CVE/blob/main/Tenda%20AC10/README.md; https://github.com/winmt/CVE/blob/main/Tenda%20AC10/README.md
CVE: CVE-2022-32055
Published: 2022-07-07
Description: Inout Homestay v2.2 was discovered to contain a SQL injection vulnerability via the guests parameter at /index.php?page=search/rentals.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/bigb0x/CVEs/blob/main/Inout-Homestay-2-2-sqli.md; https://github.com/bigb0x/CVEs/blob/main/Inout-Homestay-2-2-sqli.md
CVE: CVE-2022-32056
Published: 2022-07-07
Description: Online Accreditation Management v1.0 was discovered to contain a SQL injection vulnerability via the USERNAME parameter at process.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/JackyG0/Online-Accreditation-Management-System-v1.0-SQLi; https://github.com/JackyG0/Online-Accreditation-Management-System-v1.0-SQLi
CVE: CVE-2022-32058
Published: 2022-07-07
Description: An infinite loop in the function httpRpmPass of TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415 allows attackers to cause a Denial of Service (DoS) via a crafted packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/whiter6666/CVE/blob/main/TP-Link%20TL-WR741NTL-WR742N%20.md; https://github.com/whiter6666/CVE/blob/main/TP-Link%20TL-WR741NTL-WR742N%20.md
CVE: CVE-2022-32449
Published: 2022-07-07
Description: TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/winmt/CVE/blob/main/TOTOLINK%20EX300_V2/README.md; https://github.com/winmt/my-vuls/tree/main/TOTOLINK%20EX300_V2; https://github.com/winmt/CVE/blob/main/TOTOLINK%20EX300_V2/README.md
CVE: CVE-2022-33098
Published: 2022-07-07
Description: Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://magnolia.com; http://magnolia.com
CVE: CVE-2022-34592
Published: 2022-07-07
Description: Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw. This vulnerability allows attackers to execute arbitrary commands via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/winmt/CVE/blob/main/WAVLINK%20WL-WN575A3/README.md; https://github.com/winmt/my-vuls/tree/main/WAVLINK%20WL-WN575A3; https://github.com/winmt/CVE/blob/main/WAVLINK%20WL-WN575A3/README.md
CVE: CVE-2022-33680
Published: 2022-07-07
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 8.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33680; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-33680
CVE: CVE-2019-19152
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-19153
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-19154
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-19155
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-19156
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-19157
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-19158
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-19159
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2020-25585
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-25586
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-25587
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-25588
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-25589
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-25590
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-25591
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-27731
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-27732
Published: 2022-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2021-29281
Published: 2022-07-07
Description: File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://aminbohio.com/gfi-mail-archiver-15-1-telerik-ui-component-arbitrary-file-upload-unauthenticated-exploit/; https://cwe.mitre.org/data/definitions/434.html; https://owasp.org/www-community/vulnerabilities/Unrestricted_File_Upload
CVE: CVE-2021-35283
Published: 2022-07-07
Description: SQL Injection vulnerability in product_admin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/atoms183/CMS/issues/1; https://github.com/atoms183/CMS/issues/1
CVE: CVE-2021-41042
Published: 2022-07-07
Description: In Eclipse Lyo versions 1.0.0 to 4.1.0, a TransformerFactory is initialized with the defaults that do not restrict DTD loading when working with RDF/XML. This allows an attacker to cause an external DTD to be retrieved.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/287; https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/287
CVE: CVE-2022-2047
Published: 2022-07-07
Description: In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.
CVSS Score: 2.7 (LOW)
CWE: CWE-20, CWE-20
References: https://github.com/eclipse/jetty.project/security/advisories/GHSA-cj7v-27pg-wf7q; https://lists.debian.org/debian-lts-announce/2022/08/msg00011.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-2048
Published: 2022-07-07
Description: In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-410, CWE-664
References: http://www.openwall.com/lists/oss-security/2022/09/09/2; https://github.com/eclipse/jetty.project/security/advisories/GHSA-wgmr-mf83-7x4j; https://lists.debian.org/debian-lts-announce/2022/08/msg00011.html
CVE: CVE-2022-2191
Published: 2022-07-07
Description: In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code paths.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404, CWE-664, CWE-404
References: https://github.com/eclipse/jetty.project/security/advisories/GHSA-8mpp-f3f7-xc28; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/eclipse/jetty.project/security/advisories/GHSA-8mpp-f3f7-xc28
CVE: CVE-2022-31029
Published: 2022-07-07
Description: AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `<script>alert("XSS")</script>` in the field marked with "Domain to look for" and hitting <kbd>enter</kbd> (or clicking on any of the buttons) will execute the script. The user must be logged in to use this vulnerability. Usually only administrators have login access to pi-hole, minimizing the risks. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/pi-hole/AdminLTE/commit/b07372bd426ca8111824a0244dc89d07a7243509; https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-cfr5-rqm5-9vhp; https://github.com/pi-hole/AdminLTE/commit/b07372bd426ca8111824a0244dc89d07a7243509
CVE: CVE-2022-32481
Published: 2022-07-07
Description: Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover.
CVSS Score: 7.8 (HIGH)
References: https://support.emc.com/kb/000201213; https://support.emc.com/kb/000201213
CVE: CVE-2022-33936
Published: 2022-07-07
Description: Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity.
CVSS Score: 8.0 (HIGH)
References: https://www.dell.com/support/kbdoc/en-us/000201258/dsa-2022-182-cloud-mobility-for-dell-emc-storage-security-update-for-a-path-traversal-rce-vulnerability; https://www.dell.com/support/kbdoc/en-us/000201258/dsa-2022-182-cloud-mobility-for-dell-emc-storage-security-update-for-a-path-traversal-rce-vulnerability
CVE: CVE-2022-32060
Published: 2022-07-07
Description: An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/bypazs/CVE-2022-32060; https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-b15becc1a5ea; https://github.com/bypazs/CVE-2022-32060
CVE: CVE-2022-32061
Published: 2022-07-07
Description: An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-c02e46fa72ab; https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-c02e46fa72ab
CVE: CVE-2022-1245
Published: 2022-07-08
Description: A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a client to gain unauthorized access to additional services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-639
References: https://github.com/keycloak/keycloak/security/advisories/GHSA-75p6-52g3-rqc8; https://github.com/keycloak/keycloak/security/advisories/GHSA-75p6-52g3-rqc8
CVE: CVE-2021-41037
Published: 2022-07-08
Description: In Eclipse p2, installable units are able to alter the Eclipse Platform installation and the local machine via touchpoints during installation. Those touchpoints can, for example, alter the command-line used to start the application, injecting things like agent or other settings that usually require particular attention in term of security. Although p2 has built-in strategies to ensure artifacts are signed and then to help establish trust, there is no such strategy for the metadata part that does configure such touchpoints. As a result, it's possible to install a unit that will run malicious code during installation without user receiving any warning about this installation step being risky when coming from untrusted source.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-829, CWE-829
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=577029; https://github.com/eclipse-equinox/p2/issues/235; https://bugs.eclipse.org/bugs/show_bug.cgi?id=577029