deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-3774
Published: 2022-10-31
Description: A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /train_scheduler_app/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may be launched remotely. The identifier of this vulnerability is VDB-212504.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-99
References: http://packetstormsecurity.com/files/169604/Train-Scheduler-App-1.0-Insecure-Direct-Object-Reference.html; https://github.com/rohit0x5/poc/blob/main/idor; https://vuldb.com/?id.212504
CVE: CVE-2022-40471
Published: 2022-10-31
Description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://drive.google.com/file/d/1m-wTfOL5gY3huaSEM3YPSf98qIrkl-TW/view?usp=sharing; https://github.com/RashidKhanPathan/CVE-2022-40471; https://www.sourcecodester.com/php-clinics-patient-management-system-source-code
CVE: CVE-2022-2741
Published: 2022-10-31
Description: The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node (this can easily be guessed based on CAN traffic analyses). The frame must contain the opposite RTR bit as what the filter installed in the vulnerable node contains (if the filter matches RTR frames, the frame must be a data frame or vice versa).
CVSS Score: 8.2 (HIGH)
CWE: CWE-400, CWE-400
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx5v-j59q-c3j8; https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx5v-j59q-c3j8
CVE: CVE-2022-39294
Published: 2022-10-31
Description: conduit-hyper integrates a conduit application with the hyper server. Prior to version 0.4.2, `conduit-hyper` did not check any limit on a request's length before calling [`hyper::body::to_bytes`](https://docs.rs/hyper/latest/hyper/body/fn.to_bytes.html). An attacker could send a malicious request with an abnormally large `Content-Length`, which could lead to a panic if memory allocation failed for that request. In version 0.4.2, `conduit-hyper` sets an internal limit of 128 MiB per request, otherwise returning status 400 ("Bad Request"). This crate is part of the implementation of Rust's [crates.io](https://crates.io/), but that service is not affected due to its existing cloud infrastructure, which already drops such malicious requests. Even with the new limit in place, `conduit-hyper` is not recommended for production use, nor to directly serve the public Internet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-1284
References: https://github.com/conduit-rust/conduit-hyper/security/advisories/GHSA-9398-5ghf-7pr6; https://github.com/conduit-rust/conduit-hyper/security/advisories/GHSA-9398-5ghf-7pr6
CVE: CVE-2022-43148
Published: 2022-10-31
Description: rtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtf_tools.h.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/lvu/rtf2html/issues/11; https://github.com/lvu/rtf2html/issues/11
CVE: CVE-2022-43151
Published: 2022-10-31
Description: timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-query.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://github.com/hzeller/timg/issues/92; https://github.com/hzeller/timg/issues/92
CVE: CVE-2022-43152
Published: 2022-10-31
Description: tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitStream.h.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/justdan96/tsMuxer/issues/641; https://github.com/justdan96/tsMuxer/issues/641
CVE: CVE-2022-44079
Published: 2022-10-31
Description: pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component __sanitizer::StackDepotBase<__sanitizer::StackDepotNode.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/zrax/pycdc/issues/291; https://github.com/zrax/pycdc/issues/291
CVE: CVE-2022-44081
Published: 2022-10-31
Description: Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/lvandeve/lodepng/issues/177; https://github.com/lvandeve/lodepng/issues/177
CVE: CVE-2022-27583
Published: 2022-10-31
Description: A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version to potentially impact the availability of the FlexiCompact.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-285
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-28763
Published: 2022-10-31
Description: The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-601
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-31690
Published: 2022-10-31
Description: Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the browser) to the Authorization Server which can lead to a privilege escalation on the subsequent approval. This scenario can happen if the Authorization Server responds with an OAuth2 Access Token Response containing an empty scope list (per RFC 6749, Section 5.1) on the subsequent request to the token endpoint to obtain the access token.
CVSS Score: 8.1 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://tanzu.vmware.com/security/cve-2022-31690; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-31692
Published: 2022-10-31
Description: Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expects that Spring Security applies security to forward and include dispatcher types. The application uses the AuthorizationFilter either manually or via the authorizeHttpRequests() method. The application configures the FilterChainProxy to apply to forward and/or include requests (e.g. spring.security.filter.dispatcher-types = request, error, async, forward, include). The application may forward or include the request to a higher privilege-secured endpoint.The application configures Spring Security to apply to every dispatcher type via authorizeHttpRequests().shouldFilterAllDispatcherTypes(true)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://tanzu.vmware.com/security/cve-2022-31692; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-38142
Published: 2022-10-31
Description: 
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-3499
Published: 2022-10-31
Description: An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://www.tenable.com/security/tns-2022-21; https://www.tenable.com/security/tns-2022-21
CVE: CVE-2022-40202
Published: 2022-10-31
Description: 
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized objects which, when deserialized, could activate an opcode for a backup scheduling function without authentication. This function allows the user to designate all function arguments and the file to be executed. This could allow the attacker to start any new process and achieve remote code execution.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-41629
Published: 2022-10-31
Description: 
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any file from the “RunningConfigs” directory. The attacker could then view and modify configuration files such as UserListInfo.xml, which would allow them to see existing administrative passwords.


CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-41644
Published: 2022-10-31
Description: 


Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could use this to create a denial-of-service state or escalate their own privileges.




CVSS Score: 8.8 (HIGH)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-41657
Published: 2022-10-31
Description: 
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application programmable interfaces (APIs). This could create arbitrary files, which could be used in API operations and could ultimately result in remote code execution. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-41679
Published: 2022-10-31
Description: Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the “back_url” parameter in appLms/index.php?modname=faq&op=play function. The exploitation of this vulnerability could allow an attacker to steal the user´s cookies in order to log in to the application.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms; https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE: CVE-2022-41680
Published: 2022-10-31
Description: Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'search[value] parameter in the appLms/ajax.server.php?r=mycertificate/getMyCertificates' function in order to dump the entire database.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms; https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE: CVE-2022-41681
Published: 2022-10-31
Description: There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in order to upload a Zip file through the SCORM importer feature. The exploitation of this vulnerability could lead to a remote code injection.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms; https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE: CVE-2022-41688
Published: 2022-10-31
Description: 
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify user groups. An attacker could provide malicious serialized objects that could run these functions without authentication to create a new user and add them to the administrator group.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-41772
Published: 2022-10-31
Description: 
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in remote code execution. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-41776
Published: 2022-10-31
Description: 
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to provide new values for user configuration files such as UserListInfo.xml. This could lead to the changing of administrative passwords.


CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-41779
Published: 2022-10-31
Description: 
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote code execution.


CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE: CVE-2022-42923
Published: 2022-10-31
Description: Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'id' parameter in the 'appCore/index.php?r=adm/mediagallery/delete' function in order to dump the entire database or delete all contents from the 'core_user_file' table.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms; https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE: CVE-2022-42924
Published: 2022-10-31
Description: Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'dyn_filter' parameter in the 'appLms/ajax.adm_server.php?r=widget/userselector/getusertabledata' function in order to dump the entire database.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms; https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE: CVE-2022-42925
Published: 2022-10-31
Description: There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in order to upload a Zip file through the plugin upload component. The exploitation of this vulnerability could lead to a remote code injection.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms; https://www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-forma-lms
CVE: CVE-2020-23255
Published: 2022-10-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-39016
Published: 2022-10-31
Description: 
Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-79, CWE-74
References: https://www.themissinglink.com.au/security-advisories/cve-2022-39016; https://www.themissinglink.com.au/security-advisories/cve-2022-39016
CVE: CVE-2022-39017
Published: 2022-10-31
Description: 


Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.


CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-79, CWE-79
References: https://www.themissinglink.com.au/security-advisories/cve-2022-39017; https://www.themissinglink.com.au/security-advisories/cve-2022-39017
CVE: CVE-2022-39018
Published: 2022-10-31
Description: 
Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL.


CVSS Score: 8.2 (HIGH)
CWE: CWE-200, CWE-287, CWE-639, CWE-287
References: https://www.themissinglink.com.au/security-advisories/cve-2022-39018; https://www.themissinglink.com.au/security-advisories/cve-2022-39018
CVE: CVE-2022-39019
Published: 2022-10-31
Description: 
Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-287, CWE-434
References: https://www.themissinglink.com.au/security-advisories/cve-2022-39019; https://www.themissinglink.com.au/security-advisories/cve-2022-39019
CVE: CVE-2022-39020
Published: 2022-10-31
Description: 
Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting.


CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.themissinglink.com.au/security-advisories/cve-2022-39020; https://www.themissinglink.com.au/security-advisories/cve-2022-39020
CVE: CVE-2022-3059
Published: 2022-10-31
Description: 
The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and using a sleep based inferential SQL injection it was possible to extract data from the database.


CVSS Score: 8.6 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.themissinglink.com.au/security-advisories/cve-2022-3059; https://www.themissinglink.com.au/security-advisories/cve-2022-3059
CVE: CVE-2022-3783
Published: 2022-10-31
Description: A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/ui-component/ui-component-ctrl.js of the component ui_text Format Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 9305d1a82f19b235dfad24a7d1dd4ed244db7743. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-212555.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/node-red/node-red-dashboard/commit/9305d1a82f19b235dfad24a7d1dd4ed244db7743; https://github.com/node-red/node-red-dashboard/issues/772; https://vuldb.com/?id.212555
CVE: CVE-2022-3784
Published: 2022-10-31
Description: A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4_Mp4AudioDsiParser::ReadBits of the file Ap4Mp4AudioInfo.cpp of the component mp4hls. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212563.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://github.com/axiomatic-systems/Bento4/files/9849116/mp42hls_ReadBits_Ap4Mp4AudioInfo66.zip; https://github.com/axiomatic-systems/Bento4/issues/806; https://vuldb.com/?id.212563
CVE: CVE-2022-3785
Published: 2022-10-31
Description: A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_DataBuffer::SetDataSize of the component Avcinfo. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212564.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://github.com/axiomatic-systems/Bento4/files/9658653/POC_avcinfo_15644345.zip; https://github.com/axiomatic-systems/Bento4/issues/780; https://vuldb.com/?id.212564
CVE: CVE-2022-40190
Published: 2022-10-31
Description: SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in users’ browsers and steal sensitive information, including user credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-300-02; https://www.cisa.gov/uscert/ics/advisories/icsa-22-300-02
CVE: CVE-2022-40287
Published: 2022-10-31
Description: 
The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messaging functionality, leading to privilege escalation or a compromise of a targeted account.


CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://www.themissinglink.com.au/security-advisories/cve-2022-40287; https://www.themissinglink.com.au/security-advisories/cve-2022-40287
CVE: CVE-2022-40288
Published: 2022-10-31
Description: 
The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the user profile data fields, which could be leveraged to escalate privileges within and compromise any account that views their user profile.


CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://www.themissinglink.com.au/security-advisories/cve-2022-40288; https://www.themissinglink.com.au/security-advisories/cve-2022-40288
CVE: CVE-2022-40289
Published: 2022-10-31
Description: 
The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to escalate privileges or compromise any accounts they can coerce into observing the targeted files.


CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79, CWE-79
References: https://www.themissinglink.com.au/security-advisories/cve-2022-40289; https://www.themissinglink.com.au/security-advisories/cve-2022-40289