deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29936
Published: 2022-04-29
Description: USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization. NOTE: this is not an Oracle Corporation product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-rj5c-j274-vw7g; https://github.com/orangecertcc/security-research/security/advisories/GHSA-rj5c-j274-vw7g
CVE: CVE-2022-29937
Published: 2022-04-29
Description: USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-xw3r-mq8p-fjv5; https://github.com/orangecertcc/security-research/security/advisories/GHSA-xw3r-mq8p-fjv5
CVE: CVE-2022-1543
Published: 2022-04-29
Description: Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-130
References: https://github.com/erudika/scoold/commit/62a0e92e1486ddc17676a7ead2c07ff653d167ce; https://huntr.dev/bounties/9889d435-3b9c-4e9d-93bc-5272e0723f9f; https://github.com/erudika/scoold/commit/62a0e92e1486ddc17676a7ead2c07ff653d167ce
CVE: CVE-2022-25854
Published: 2022-04-29
Description: This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bsg.tech/blog/cve-2022-25854-stored-xss-in-yaireo-tagify-npm-module/; https://github.com/yairEO/tagify/commit/198c0451fad[PII_REDACTED]5ccfc84ab371def4c7; https://github.com/yairEO/tagify/issues/988
CVE: CVE-2022-29945
Published: 2022-04-29
Description: DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-319
References: https://twitter.com/StarFire2258/status/[PII_REDACTED]29637120; https://twitter.com/d0tslash/status/[PII_REDACTED]76284672; https://www.theverge.com/2022/4/28/23046916/dji-aeroscope-signals-not-encrypted-drone-tracking
CVE: CVE-2022-28198
Published: 2022-04-29
Description: NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-706
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5342; https://nvidia.custhelp.com/app/answers/detail/a_id/5342
CVE: CVE-2022-29947
Published: 2022-04-29
Description: Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/woodpecker-ci/woodpecker/pull/879; https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1; https://github.com/woodpecker-ci/woodpecker/pull/879
CVE: CVE-2022-29967
Published: 2022-04-29
Description: static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/babelouest/glewlwyd/commit/e3f7245c33897bf9b3a75acfcdb8b7b93974bf11; https://github.com/babelouest/glewlwyd/commit/e3f7245c33897bf9b3a75acfcdb8b7b93974bf11
CVE: CVE-2022-29265
Published: 2022-04-30
Description: Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML External Entity references when configured with default property values: - EvaluateXPath - EvaluateXQuery - ValidateXml Apache NiFi flow configurations that include these Processors are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations in the default configuration for these Processors, and disallows XML External Entity resolution in standard services.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://lists.apache.org/thread/47od9kr9n4cyv0mv81jh3pkyx815kyjl; https://nifi.apache.org/security.html#CVE-2022-29265; https://lists.apache.org/thread/47od9kr9n4cyv0mv81jh3pkyx815kyjl
CVE: CVE-2022-28323
Published: 2022-04-30
Description: An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,
CVSS Score: 7.5 (HIGH)
References: https://gerrit.wikimedia.org/r/q/93758c4c13b972d240a6313e0472df[PII_REDACTED]; https://gerrit.wikimedia.org/r/q/I9d3b9a942ea71d777ec32121fa36262f549d283d; https://phabricator.wikimedia.org/T298434
CVE: CVE-2021-41992
Published: 2022-04-30
Description: A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.
CVSS Score: 7.7 (HIGH)
CWE: CWE-288, CWE-310, CWE-287
References: https://docs.pingidentity.com/bundle/pingid/page/klc[PII_REDACTED]16.html; https://www.pingidentity.com/en/resources/downloads/pingid.html; https://docs.pingidentity.com/bundle/pingid/page/klc[PII_REDACTED]16.html
CVE: CVE-2021-41993
Published: 2022-04-30
Description: A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-310, CWE-330
References: https://docs.pingidentity.com/bundle/pingid/page/zvy[PII_REDACTED]79.html; https://www.pingidentity.com/en/resources/downloads/pingid.html; https://docs.pingidentity.com/bundle/pingid/page/zvy[PII_REDACTED]79.html
CVE: CVE-2021-41994
Published: 2022-04-30
Description: A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-310, CWE-330
References: https://docs.pingidentity.com/bundle/pingid/page/ejd[PII_REDACTED]99.html; https://www.pingidentity.com/en/resources/downloads/pingid.html; https://docs.pingidentity.com/bundle/pingid/page/ejd[PII_REDACTED]99.html
CVE: CVE-2021-42001
Published: 2022-04-30
Description: PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.
CVSS Score: 8.0 (HIGH)
CWE: CWE-310
References: https://docs.pingidentity.com/bundle/pingid/page/dyt[PII_REDACTED]78.html; https://www.pingidentity.com/en/resources/downloads/pingid.html; https://docs.pingidentity.com/bundle/pingid/page/dyt[PII_REDACTED]78.html
CVE: CVE-2022-1544
Published: 2022-05-01
Description: Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained confidential data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236, CWE-1236
References: https://github.com/luyadev/yii-helpers/commit/9956ed63f516110c2b588471507b870e748c4cfb; https://huntr.dev/bounties/fa6d6e75-bc7a-40f6-9bdd[PII_REDACTED]d4; https://github.com/luyadev/yii-helpers/commit/9956ed63f516110c2b588471507b870e748c4cfb
CVE: CVE-2022-23060
Published: 2022-05-01
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inject malicious JavaScript in the filename under the “Manage files” tab
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/shopizer-ecommerce/shopizer/commit/6b9f1ecd303b3b724d96bd08095c1a751dcc287e; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23060; https://github.com/shopizer-ecommerce/shopizer/commit/6b9f1ecd303b3b724d96bd08095c1a751dcc287e
CVE: CVE-2022-23061
Published: 2022-05-01
Description: In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecure Direct Object Reference (IDOR) vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/shopizer-ecommerce/shopizer/commit/6b9f1ecd303b3b724d96bd08095c1a751dcc287e; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23061; https://github.com/shopizer-ecommerce/shopizer/commit/6b9f1ecd303b3b724d96bd08095c1a751dcc287e
CVE: CVE-2022-28481
Published: 2022-05-01
Description: CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: https://github.com/zvory/csv-safe; https://github.com/zvory/csv-safe/issues/7; https://github.com/zvory/csv-safe/pull/8
CVE: CVE-2022-21144
Published: 2022-05-01
Description: This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/libxmljs/libxmljs/commit/2501807bde9b38cfaed06d1e140487516d91379d; https://github.com/libxmljs/libxmljs/pull/594; https://snyk.io/vuln/SNYK-JS-LIBXMLJS-2348756
CVE: CVE-2022-21149
Published: 2022-05-01
Description: The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain unauthorized access to that user's account through the stolen cookie.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://snyk.io/vuln/SNYK-PHP-SCARTCORE-2389036; https://snyk.io/vuln/SNYK-PHP-SCARTSCART-2389035; https://snyk.io/vuln/SNYK-PHP-SCARTCORE-2389036
CVE: CVE-2022-21167
Published: 2022-05-01
Description: All versions of package masuit.tools.core are vulnerable to Arbitrary Code Execution via the ReceiveVarData<T> function in the SocketClient.cs component. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatter.
CVSS Score: 7.5 (HIGH)
References: https://github.com/ldqk/Masuit.Tools/blob/327f42b9f20f25bb[PII_REDACTED]9c8265fc968d91/Masuit.Tools.Abstractions/Net/SocketClient.cs%23L197; https://snyk.io/vuln/SNYK-DOTNET-MASUITTOOLSCORE-2316875; https://github.com/ldqk/Masuit.Tools/blob/327f42b9f20f25bb[PII_REDACTED]9c8265fc968d91/Masuit.Tools.Abstractions/Net/SocketClient.cs%23L197
CVE: CVE-2022-21189
Published: 2022-05-01
Description: The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the Dexie.setByKeyPath(obj, keyPath, value) function which does not properly check the keys being set (like __proto__ or constructor). This can allow an attacker to add/modify properties of the Object.prototype leading to prototype pollution vulnerability. **Note:** This vulnerability can occur in multiple ways, for example when modifying a collection with untrusted user input.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/dexie/Dexie.js/blob/fe682ef24568278c3b31d9d6c93de095d4b77ae8/src/functions/utils.ts%23L134-L164; https://github.com/dexie/Dexie.js/commit/1d655a69b9f28c3af6fae10cf5c61df387dc689b; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2805308
CVE: CVE-2022-21227
Published: 2022-05-01
Description: The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine.
CVSS Score: 7.5 (HIGH)
References: https://github.com/TryGhost/node-sqlite3/commit/593c9d498be2510d[PII_REDACTED]37e3bf89401c4a; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2805470; https://snyk.io/vuln/SNYK-JS-SQLITE3-2388645
CVE: CVE-2022-21230
Published: 2022-05-01
Description: This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is written to a RandomAccessFile when the it is larger than 1024 bytes. This file is created with insecure permissions that allow its contents to be viewed by all users on the host machine. **Workaround:** Manually specifying the -Djava.io.tmpdir= argument when launching Java to set the temporary directory to a directory exclusively controlled by the current user can fix this issue.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-2r85-x9cf-8fcg; https://github.com/NanoHttpd/nanohttpd/blob/efb2ebf85a2b06f7c508aba9eaad5377e3a01e81/core/src/main/java/org/nanohttpd/protocols/http/tempfiles/DefaultTempFile.java%23L58; https://github.com/NanoHttpd/nanohttpd/blob/efb2ebf85a2b06f7c508aba9eaad5377e3a01e81/core/src/main/java/org/nanohttpd/protocols/http/tempfiles/DefaultTempFileManager.java%23L60
CVE: CVE-2022-22143
Published: 2022-05-01
Description: The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. **Note:** This vulnerability derives from an incomplete fix of another [vulnerability](https://security.snyk.io/vuln/SNYK-JS-CONVICT-1062508)
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/mozilla/node-convict/blob/5eb1314f85346760a3c31cb14510f2f0af11d0d3/packages/convict/src/main.js%23L569; https://github.com/mozilla/node-convict/commit/3b86be087d8f14681a9c889d45da7fe3ad9cd880; https://snyk.io/vuln/SNYK-JS-CONVICT-2340604
CVE: CVE-2022-23923
Published: 2022-05-01
Description: All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stored in the application.remote object.
CVSS Score: 8.6 (HIGH)
References: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2441254; https://snyk.io/vuln/SNYK-JS-JAILED-2391490; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2441254
CVE: CVE-2022-24437
Published: 2022-05-01
Description: The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn(). However, the outpath parameter passed to it may be a command-line argument to the git clone command and result in arbitrary command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88
References: https://gist.github.com/lirantal/327e9dd32686991b5a1fa6341aac2e7b; https://github.com/feross/git-pull-or-clone/commit/f9ce092be13cc32e685dfa26e7705e9c6e3108a3; https://snyk.io/vuln/SNYK-JS-GITPULLORCLONE-2434307
CVE: CVE-2022-25349
Published: 2022-05-01
Description: All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as &lt;not-a-tag /&gt;) that is being parsed as HTML/JavaScript, and inserted into the Document Object Model (DOM). This vulnerability can be exploited when the user-input is provided to the autocomplete component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dogfalo/materialize/blob/v1-dev/js/autocomplete.js%23L285%20; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2766498; https://snyk.io/vuln/SNYK-JS-MATERIALIZECSS-2324800
CVE: CVE-2022-25645
Published: 2022-05-01
Description: All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protorype. By crafting a malicious object, it is possible to bypass this check and achieve prototype pollution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1321
References: https://github.com/lukeed/dset/blob/master/src/merge.js%23L9; https://github.com/lukeed/dset/pull/38; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2431974
CVE: CVE-2022-25647
Published: 2022-05-01
Description: The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.
CVSS Score: 7.7 (HIGH)
CWE: CWE-502
References: https://github.com/google/gson/pull/1991; https://github.com/google/gson/pull/1991/commits; https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html
CVE: CVE-2022-25767
Published: 2022-05-01
Description: All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/JinYiTong/CVE-Req/blob/main/ureport2/ureport2-console.md; https://snyk.io/vuln/SNYK-JAVA-COMBSTEKUREPORT-2322018; https://github.com/JinYiTong/CVE-Req/blob/main/ureport2/ureport2-console.md
CVE: CVE-2022-25842
Published: 2022-05-01
Description: All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.java; https://github.com/alibaba/one-java-agent/pull/29; https://github.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bf
CVE: CVE-2022-25844
Published: 2022-05-01
Description: The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat() of NUMBER_FORMATS.PATTERNS[1].posPre with a very high value. **Note:** 1) This package has been deprecated and is no longer maintained. 2) The vulnerable versions are 1.7.0 and higher.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2WUSPYOTOMAZPDEFPWPSCSPMNODRDKK3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LNAKCNTVBIHWAUT3FKWV5N67PQXSZOO/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-25850
Published: 2022-05-01
Description: The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery (SSRF) when interceptor mode is set to proxy. It occurs when an HTTP request is made by a backend server to an untrusted URL submitted by a user. It leads to a leakage of sensitive information from the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/hoppscotch/proxyscotch/commit/de67380f62f907f201d75854b76024ba4885fab7; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMHOPPSCOTCHPROXYSCOTCH-2435228; https://github.com/hoppscotch/proxyscotch/commit/de67380f62f907f201d75854b76024ba4885fab7
CVE: CVE-2022-26068
Published: 2022-05-01
Description: This affects the package pistacheio/pistache before 0.0.3.20220425. It is possible to traverse directories to fetch arbitrary files from the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/pistacheio/pistache/pull/1065; https://snyk.io/vuln/SNYK-UNMANAGED-PISTACHEIOPISTACHE-2806332; https://github.com/pistacheio/pistache/pull/1065
CVE: CVE-2022-25301
Published: 2022-05-01
Description: All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype.
CVSS Score: 7.7 (HIGH)
CWE: CWE-1321
References: https://github.com/metabench/jsgui-lang-essentials/issues/1; https://snyk.io/vuln/SNYK-JS-JSGUILANGESSENTIALS-2316897; https://github.com/metabench/jsgui-lang-essentials/issues/1
CVE: CVE-2021-31673
Published: 2022-05-02
Description: A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cyclos.com; http://packetstormsecurity.com/files/167040/Cyclos-4.14.7-Cross-Site-Scripting.html; https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-cve-2021-31673
CVE: CVE-2021-31674
Published: 2022-05-02
Description: Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cyclos.com; https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-in-undefined-enum-cve-2021-31674; https://www.exploit-db.com/exploits/50908
CVE: CVE-2021-40822
Published: 2022-05-02
Description: GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/geoserver/geoserver/compare/2.19.2...2.19.3; https://github.com/geoserver/geoserver/releases; https://osgeo-org.atlassian.net/browse/GEOS-10229
CVE: CVE-2022-28451
Published: 2022-05-02
Description: nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/nopSolutions/nopCommerce/commit/47ff9a241243db9359f10216bcf401baaa36d0b4; https://github.com/nopSolutions/nopCommerce/issues/6203; https://github.com/nopSolutions/nopCommerce/commit/47ff9a241243db9359f10216bcf401baaa36d0b4
CVE: CVE-2022-29849
Published: 2022-05-02
Description: In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system.
CVSS Score: 7.8 (HIGH)
References: https://community.progress.com/s/article/OpenEdge-11-7-14-is-Now-Available; https://community.progress.com/s/article/OpenEdge-12-2-9-Update-is-available; https://community.progress.com/s/article/Remediation-of-Privilege-Escalation-Security-Vulnerability-CVE-2022-29849
CVE: CVE-2022-29968
Published: 2022-05-02
Description: An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.
CVSS Score: 7.8 (HIGH)
CWE: CWE-909
References: https://github.com/torvalds/linux/commit/32452a3eb8b64e01e2be717f518c0be046975b9d; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU7MT7BPTA2NG24BTLZF5ZWYTLSO7BU3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TLWTG3TWIMLNQEVTA3ZQYVLLU2AJM3DY/
CVE: CVE-2022-29969
Published: 2022-05-02
Description: The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/c/787807; https://phabricator.wikimedia.org/T307028; https://gerrit.wikimedia.org/r/c/787807