deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20735
Published: 2022-04-15
Description: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. These actions could include modifying the system configuration and deleting accounts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanage-csrf-rxQL4tXR; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanage-csrf-rxQL4tXR
CVE: CVE-2022-20739
Published: 2022-04-15
Description: A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected system as a low-privileged user to exploit this vulnerability. This vulnerability exists because a file leveraged by a root user is executed when a low-privileged user runs specific commands on an affected system. An attacker could exploit this vulnerability by injecting arbitrary commands to a specific file as a lower-privileged user and then waiting until an admin user executes specific commands. The commands would then be executed on the device by the root user. A successful exploit could allow the attacker to escalate their privileges on the affected system from a low-privileged user to the root user.
CVSS Score: 7.3 (HIGH)
CWE: CWE-269, CWE-269
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-vman-tEJFpBSL; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-vman-tEJFpBSL
CVE: CVE-2022-20747
Published: 2022-04-15
Description: A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system. This vulnerability is due to insufficient API authorization checking on the underlying operating system. An attacker could exploit this vulnerability by sending a crafted API request to Cisco vManage as a lower-privileged user and gaining access to sensitive information that they would not normally be authorized to access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-202
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-infodis-73sHJNEq; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-infodis-73sHJNEq
CVE: CVE-2022-20758
Published: 2022-04-15
Description: A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the incorrect processing of a BGP update message that contains specific EVPN attributes. An attacker could exploit this vulnerability by sending a BGP update message that contains specific EVPN attributes. To exploit this vulnerability, an attacker must control a BGP speaker that has an established trusted peer connection to an affected device that is configured with the address family L2VPN EVPN to receive and process the update message. This vulnerability cannot be exploited by any data that is initiated by clients on the Layer 2 network or by peers that are not configured to accept the L2VPN EVPN address family. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP updates only from explicitly defined peers. For this vulnerability to be exploited, the malicious BGP update message must either come from a configured, valid BGP peer or be injected by the attacker into the affected BGP network on an existing, valid TCP connection to a BGP peer.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgpevpn-zWTRtPBb; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgpevpn-zWTRtPBb
CVE: CVE-2022-20761
Published: 2022-04-15
Description: A vulnerability in the integrated wireless access point (AP) packet processing of the Cisco 1000 Series Connected Grid Router (CGR1K) could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input validation of received traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the integrated AP to stop processing traffic, resulting in a DoS condition. It may be necessary to manually reload the CGR1K to restore AP operation.
CVSS Score: 7.4 (HIGH)
CWE: CWE-248, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cgr1k-ap-dos-mSZR4QVh; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cgr1k-ap-dos-mSZR4QVh
CVE: CVE-2022-27043
Published: 2022-04-15
Description: Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/0day1/g1ory; https://github.com/0day1/g1ory
CVE: CVE-2022-21159
Published: 2022-04-15
Description: A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. A specially-crafted series of network requests can lead to denial of service. An attacker can send a sequence of malformed iec61850 messages to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://github.com/mz-automation/libiec61850/commit/cfa94cbf10302bedc779703f874ee2e8387a0721; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1467; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1467
CVE: CVE-2022-23865
Published: 2022-04-15
Description: Nyron 1.0 is affected by a SQL injection vulnerability through Nyron/Library/Catalog/winlibsrch.aspx. To exploit this vulnerability, an attacker must inject '"> on the thes1 parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/50674; https://www.exploit-db.com/exploits/50674
CVE: CVE-2022-26594
Published: 2022-04-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a form field's help text to (1) Forms module's form builder, or (2) App Builder module's object form view's form builder.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-26594-xss-vulnerability-with-form-field-help-text; http://liferay.com
CVE: CVE-2022-27258
Published: 2022-04-15
Description: Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://framagit.org/hubzilla/core/-/commit/0784cd593a39a4fc297e8a82f7e79bc8019a0868#1c497fbb3a46b78edf04cc2a2fa33f67e3ffbe2a; https://hubzilla.org/channel/hubzilla/; https://framagit.org/hubzilla/core/-/commit/0784cd593a39a4fc297e8a82f7e79bc8019a0868#1c497fbb3a46b78edf04cc2a2fa33f67e3ffbe2a
CVE: CVE-2022-28109
Published: 2022-04-15
Description: Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding. The impact is: execute arbitrary code (remote). The component is: WebDriver endpoint of Selenium Grid / Selenium Standalone Server. The attack vector is: Triggered by browsing to to a malicious remote web server. The WebDriver endpoint of Selenium Server (Grid) is vulnerable to DNS rebinding. This can be used to execute arbitrary code on the machine.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2022/04/16/1; https://www.gabriel.urdhr.fr/2022/02/07/selenium-standalone-server-csrf-dns-rebinding-rce/; https://www.openwall.com/lists/oss-security/2022/02/07/3
CVE: CVE-2022-29268
Published: 2022-04-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-36205
Published: 2022-04-15
Description: Under certain circumstances the session token is not cleared on logout.
CVSS Score: 8.1 (HIGH)
CWE: CWE-459, CWE-459
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-02; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-02
CVE: CVE-2021-36828
Published: 2022-04-15
Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-maintenance/wordpress-wp-maintenance-plugin-6-0-4-authenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-maintenance/wordpress-wp-maintenance-plugin-6-0-4-authenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2021-42230
Published: 2022-04-15
Description: Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter.
CVSS Score: 9.8 (CRITICAL)
References: https://www.exploit-db.com/exploits/50295; https://www.exploit-db.com/exploits/50295
CVE: CVE-2022-27849
Published: 2022-04-15
Description: Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-sensitive-information-disclosure-vulnerability; https://wordpress.org/plugins/simple-ajax-chat/#developers; https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-sensitive-information-disclosure-vulnerability
CVE: CVE-2022-27850
Published: 2022-04-15
Description: Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-multiple-cross-site-request-forgery-csrf-vulnerability; https://wordpress.org/plugins/simple-ajax-chat/#developers; https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-multiple-cross-site-request-forgery-csrf-vulnerability
CVE: CVE-2022-27851
Published: 2022-04-15
Description: Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/use-any-font/wordpress-use-any-font-plugin-6-1-7-cross-site-request-forgery-csrf-vulnerability; https://wordpress.org/plugins/use-any-font/; https://patchstack.com/database/vulnerability/use-any-font/wordpress-use-any-font-plugin-6-1-7-cross-site-request-forgery-csrf-vulnerability
CVE: CVE-2022-27852
Published: 2022-04-15
Description: Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-wordpress-help-desk-plugin-1-5-5-multiple-unauthenticated-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve; https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-wordpress-help-desk-plugin-1-5-5-multiple-unauthenticated-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve
CVE: CVE-2021-44481
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in check_and_set_timeout in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44482
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44483
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44484
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44485
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44486
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain control of the flow of execution.
CVSS Score: 9.8 (CRITICAL)
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44487
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44488
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber in sr_port/op_fnfnumber.c in order to corrupt memory or crash the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-787
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44489
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application. This is a "- digs" subtraction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44490
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a "- (digs < 1 ? 1 : digs)" subtraction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-682
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44491
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a digs-- calculation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-682
References: https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE: CVE-2021-44492
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44493
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44494
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44495
Published: 2022-04-15
Description: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44496
Published: 2022-04-15
Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structures and gain control of the flow of execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44497
Published: 2022-04-15
Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44498
Published: 2022-04-15
Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44499
Published: 2022-04-15
Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44500
Published: 2022-04-15
Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44501
Published: 2022-04-15
Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44502
Published: 2022-04-15
Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size of a memset that occurs in calls to util_format in sr_unix/util_output.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/
CVE: CVE-2021-44503
Published: 2022-04-15
Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html; https://gitlab.com/YottaDB/DB/YDB/-/issues/828; https://sourceforge.net/projects/fis-gtm/files/