deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-35874
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. Specially-crafted configuration values can lead to memory corruption, information disclosure and denial of service. An attacker can modify a configuration value and then execute an XCMD to trigger these vulnerabilities.This vulnerability arises from format string injection via the `ssid` and `ssid_hex` configuration parameters, as used within the `testWifiAP` XCMD handler
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1581; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1581
CVE: CVE-2022-35875
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. Specially-crafted configuration values can lead to memory corruption, information disclosure and denial of service. An attacker can modify a configuration value and then execute an XCMD to trigger these vulnerabilities.This vulnerability arises from format string injection via the `wpapsk` configuration parameter, as used within the `testWifiAP` XCMD handler
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1581; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1581
CVE: CVE-2022-35876
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. Specially-crafted configuration values can lead to memory corruption, information disclosure and denial of service. An attacker can modify a configuration value and then execute an XCMD to trigger these vulnerabilities.This vulnerability arises from format string injection via the `default_key_id` and `key` configuration parameters, as used within the `testWifiAP` XCMD handler
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1581; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1581
CVE: CVE-2022-35877
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. Specially-crafted configuration values can lead to memory corruption, information disclosure and denial of service. An attacker can modify a configuration value and then execute an XCMD to trigger these vulnerabilities.This vulnerability arises from format string injection via the `default_key_id` configuration parameter, as used within the `testWifiAP` XCMD handler
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1581; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1581
CVE: CVE-2022-35878
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicious UPnP service to trigger these vulnerabilities.This vulnerability arises from format string injection via `ST` and `Location` HTTP response headers, as used within the `DoEnumUPnPService` action handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583
CVE: CVE-2022-35879
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicious UPnP service to trigger these vulnerabilities.This vulnerability arises from format string injection via `controlURL` XML tag, as used within the `DoUpdateUPnPbyService` action handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583
CVE: CVE-2022-35880
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicious UPnP service to trigger these vulnerabilities.This vulnerability arises from format string injection via `NewInternalClient` XML tag, as used within the `DoUpdateUPnPbyService` action handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583
CVE: CVE-2022-35881
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicious UPnP service to trigger these vulnerabilities.This vulnerability arises from format string injection via `errorCode` and `errorDescription` XML tags, as used within the `DoUpdateUPnPbyService` action handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583
CVE: CVE-2022-35884
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability arises from format string injection via the `ssid_hex` HTTP parameter, as used within the `/action/wirelessConnect` handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1585; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1585
CVE: CVE-2022-35885
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability arises from format string injection via the `wpapsk_hex` HTTP parameter, as used within the `/action/wirelessConnect` handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1585; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1585
CVE: CVE-2022-35886
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability arises from format string injection via the `default_key_id` and `key` HTTP parameters, as used within the `/action/wirelessConnect` handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1585; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1585
CVE: CVE-2022-35887
Published: 2022-10-25
Description: Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability arises from format string injection via the `default_key_id` HTTP parameter, as used within the `/action/wirelessConnect` handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1585; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1585
CVE: CVE-2022-36783
Published: 2022-10-25
Description: AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-38195
Published: 2022-10-25
Description: There is as reflected cross site scripting issue in Esri ArcGIS Server versions 10.9.1 and below which may allow a remote unauthorized attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim’s browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch; https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE: CVE-2022-38196
Published: 2022-10-25
Description: Esri ArcGIS Server versions 10.9.1 and prior have a path traversal vulnerability that may result in a denial of service by allowing a remote, authenticated attacker to overwrite internal ArcGIS Server directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch; https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE: CVE-2022-38197
Published: 2022-10-25
Description: Esri ArcGIS Server versions 10.9.1 and below have an unvalidated redirect issue that may allow a remote, unauthenticated attacker to phish a user into accessing an attacker controlled website via a crafted query parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch; https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE: CVE-2022-38198
Published: 2022-10-25
Description: There is a reflected cross site scripting issue in the Esri ArcGIS Server services directory versions 10.9.1 and below that may allow a remote, unauthenticated attacker to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the victim’s browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch; https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE: CVE-2022-38199
Published: 2022-10-25
Description: A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers provide users with warnings against running unsigned executables downloaded from the internet.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-494, CWE-494
References: https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch; https://www.esri.com/arcgis-blog/products/administration/administration/arcgis-server-security-2022-update-1-patch
CVE: CVE-2022-38200
Published: 2022-10-25
Description: A cross site scripting vulnerability exists in some map service configurations of ArcGIS Server versions 10.8.1 and 10.7.1. Specifically crafted web requests can execute arbitrary JavaScript in the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-map-service-security-2022-update-1-is-now-available; https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-server-map-service-security-2022-update-1-is-now-available
CVE: CVE-2022-38435
Published: 2022-10-25
Description: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/illustrator/apsb22-56.html; https://helpx.adobe.com/security/products/illustrator/apsb22-56.html
CVE: CVE-2022-38436
Published: 2022-10-25
Description: Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-56.html; https://helpx.adobe.com/security/products/illustrator/apsb22-56.html
CVE: CVE-2022-38580
Published: 2022-10-25
Description: Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://packetstormsecurity.com/files/171546/X-Skipper-Proxy-0.13.237-Server-Side-Request-Forgery.html; http://skipper.com; http://zalando.com
CVE: CVE-2022-38870
Published: 2022-10-25
Description: Free5gc v3.2.1 is vulnerable to Information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://github.com/free5gc/free5gc/issues/387; https://github.com/free5gc/free5gc/issues/387
CVE: CVE-2022-39312
Published: 2022-10-25
Description: Dataease is an open source data visualization analysis tool. Dataease prior to 1.15.2 has a deserialization vulnerability. In Dataease, the Mysql data source in the data source function can customize the JDBC connection parameters and the Mysql server target to be connected. In `backend/src/main/java/io/dataease/provider/datasource/JdbcProvider.java`, the `MysqlConfiguration` class does not filter any parameters. If an attacker adds some parameters to a JDBC url and connects to a malicious mysql server, the attacker can trigger the mysql jdbc deserialization vulnerability. Through the deserialization vulnerability, the attacker can execute system commands and obtain server privileges. Version 1.15.2 contains a patch for this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-502, CWE-502
References: https://github.com/dataease/dataease/commit/956ee2d6c9e81349a60aef435efc046888e10a6d; https://github.com/dataease/dataease/pull/3328; https://github.com/dataease/dataease/releases/tag/v1.15.2
CVE: CVE-2022-39315
Published: 2022-10-25
Description: Kirby is a Content Management System. Prior to versions 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, a user enumeration vulnerability affects all Kirby sites with user accounts unless Kirby's API and Panel are disabled in the config. It can only be exploited for targeted attacks because the attack does not scale to brute force. The problem has been patched in Kirby 3.5.8.2, Kirby 3.6.6.2, Kirby 3.7.5.1, and Kirby 3.8.1. In all of the mentioned releases, the maintainers have rewritten the affected code so that the delay is also inserted after the brute force limit is reached.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-204, CWE-209
References: https://github.com/getkirby/kirby/releases/tag/3.5.8.2; https://github.com/getkirby/kirby/releases/tag/3.6.6.2; https://github.com/getkirby/kirby/releases/tag/3.7.5.1
CVE: CVE-2022-39321
Published: 2022-10-25
Description: GitHub Actions Runner is the application that runs a job from a GitHub Actions workflow. The actions runner invokes the docker cli directly in order to run job containers, service containers, or container actions. A bug in the logic for how the environment is encoded into these docker commands was discovered in versions prior to 2.296.2, 2.293.1, 2.289.4, 2.285.2, and 2.283.4 that allows an input to escape the environment variable and modify that docker command invocation directly. Jobs that use container actions, job containers, or service containers alongside untrusted user inputs in environment variables may be vulnerable. The Actions Runner has been patched, both on `github.com` and hotfixes for GHES and GHAE customers in versions 2.296.2, 2.293.1, 2.289.4, 2.285.2, and 2.283.4. GHES and GHAE customers may want to patch their instance in order to have their runners automatically upgrade to these new runner versions. As a workaround, users may consider removing any container actions, job containers, or service containers from their jobs until they are able to upgrade their runner versions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/actions/runner/pull/2107; https://github.com/actions/runner/pull/2108; https://github.com/actions/runner/security/advisories/GHSA-2c6m-6gqh-6qg3
CVE: CVE-2022-39322
Published: 2022-10-25
Description: @keystone-6/core is a core package for Keystone 6, a content management system for Node.js. Starting with version 2.2.0 and prior to version 2.3.1, users who expected their `multiselect` fields to use the field-level access control - if configured - are vulnerable to their field-level access control not being used. List-level access control is not affected. Field-level access control for fields other than `multiselect` are not affected. Version 2.3.1 contains a fix for this issue. As a workaround, stop using the `multiselect` field.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-285, CWE-863
References: https://github.com/keystonejs/keystone/commit/65c6ee3deef23605fc72b[PII_REDACTED]6a7a65e7c; https://github.com/keystonejs/keystone/security/advisories/GHSA-6mhr-52mv-6v6f; https://github.com/keystonejs/keystone/commit/65c6ee3deef23605fc72b[PII_REDACTED]6a7a65e7c
CVE: CVE-2022-39326
Published: 2022-10-25
Description: kartverket/github-workflows are shared reusable workflows for GitHub Actions. Prior to version 2.7.5, all users of the `run-terraform` reusable workflow from the kartverket/github-workflows repo are affected by a code injection vulnerability. A malicious actor could potentially send a PR with a malicious payload leading to execution of arbitrary JavaScript code in the context of the workflow. Users should upgrade to at least version 2.7.5 to resolve the issue. As a workaround, review any pull requests from external users for malicious payloads before allowing them to trigger a build.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/kartverket/github-workflows/pull/19; https://github.com/kartverket/github-workflows/releases/tag/v2.7.5; https://github.com/kartverket/github-workflows/security/advisories/GHSA-f9qj-7gh3-mhj4
CVE: CVE-2022-39327
Published: 2022-10-25
Description: Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. The vulnerability is only applicable when the Azure CLI command is run on a Windows machine and with any version of PowerShell and when the parameter value contains the `&` or `|` symbols. If any of these prerequisites are not met, this vulnerability is not applicable. Users should upgrade to version 2.40.0 or greater to receive a a mitigation for the vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94, CWE-78
References: https://github.com/Azure/azure-cli/pull/23514; https://github.com/Azure/azure-cli/pull/24015; https://github.com/Azure/azure-cli/security/advisories/GHSA-47xc-9rr2-q7p4
CVE: CVE-2022-39340
Published: 2022-10-25
Description: OpenFGA is an authorization/permission engine. Prior to version 0.2.4, the `streamed-list-objects` endpoint was not validating the authorization header, resulting in disclosure of objects in the store. Users `openfga/openfga` versions 0.2.3 and prior who are exposing the OpenFGA service to the internet are vulnerable. Version 0.2.4 contains a patch for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285, CWE-862
References: https://github.com/openfga/openfga/commit/779d73d4b6d067ee042ec9b59fec707eed71e42f; https://github.com/openfga/openfga/releases/tag/v0.2.4; https://github.com/openfga/openfga/security/advisories/GHSA-95x7-mh78-7w2r
CVE: CVE-2022-39341
Published: 2022-10-25
Description: OpenFGA is an authorization/permission engine. Versions prior to version 0.2.4 are vulnerable to authorization bypass under certain conditions. Users who have wildcard (`*`) defined on tupleset relations in their authorization model are vulnerable. Version 0.2.4 contains a patch for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-285
References: https://github.com/openfga/openfga/commit/b466769cc100b[PII_REDACTED]578718d313f52695b; https://github.com/openfga/openfga/releases/tag/v0.2.4; https://github.com/openfga/openfga/security/advisories/GHSA-vj4m-83m8-xpw5
CVE: CVE-2022-39342
Published: 2022-10-25
Description: OpenFGA is an authorization/permission engine. Versions prior to version 0.2.4 are vulnerable to authorization bypass under certain conditions. Users whose model has a relation defined as a tupleset (the right hand side of a ‘from’ statement) that involves anything other than a direct relationship (e.g. ‘as self’) are vulnerable. Version 0.2.4 contains a patch for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-285
References: https://github.com/openfga/openfga/commit/c8db1ee3d2a366f18e585dd33236340e76e784c4; https://github.com/openfga/openfga/releases/tag/v0.2.4; https://github.com/openfga/openfga/security/advisories/GHSA-f4mm-2r69-mg5f
CVE: CVE-2022-39345
Published: 2022-10-25
Description: Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin prior to 2.5.4 is vulnerable to path traversal, which leads to file upload vulnerabilities. Version 2.5.4 contains a patch for this issue. There are no workarounds aside from upgrading to a patched version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-23, CWE-22
References: https://github.com/flipped-aurora/gin-vue-admin/blob/main/server/service/system/sys_auto_code.go; https://github.com/flipped-aurora/gin-vue-admin/issues/1263; https://github.com/flipped-aurora/gin-vue-admin/pull/1264