deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-32777
Published: 2022-08-22
Description: An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the session cookie to be leaked over non-HTTPS connections. This could allow an attacker to steal the session cookie via crafted HTTP requests.This vulnerabilty is for the session cookie which can be leaked via JavaScript.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1542; https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql
CVE: CVE-2022-32778
Published: 2022-08-22
Description: An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the session cookie to be leaked over non-HTTPS connections. This could allow an attacker to steal the session cookie via crafted HTTP requests.This vulnerability is for the pass cookie, which contains the hashed password and can be leaked via JavaScript.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1542; https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql
CVE: CVE-2022-33147
Published: 2022-08-22
Description: A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder functionality which can be used to add new videos, allowing an attacker to inject SQL by manipulating the videoDownloadedLink or duration parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1551; https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql
CVE: CVE-2022-33148
Published: 2022-08-22
Description: A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules plugin, allowing an attacker to inject SQL by manipulating the title parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1551; https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql
CVE: CVE-2022-33149
Published: 2022-08-22
Description: A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the CloneSite plugin, allowing an attacker to inject SQL by manipulating the url parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1551; https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql
CVE: CVE-2022-34652
Published: 2022-08-22
Description: A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules plugin, allowing an attacker to inject SQL by manipulating the description parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1551; https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql
CVE: CVE-2022-38171
Published: 2022-08-22
Description: Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2022/09/02/11; http://www.xpdfreader.com/security-fixes.html; https://dl.xpdfreader.com/xpdf-4.04.tar.gz
CVE: CVE-2021-29891
Published: 2022-08-22
Description: IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may cause it to lose network services. IBM X-Force ID: 207221.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/207221; https://www.ibm.com/support/pages/node/6614233; https://exchange.xforce.ibmcloud.com/vulnerabilities/207221
CVE: CVE-2022-38667
Published: 2022-08-22
Description: HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used. The HTTP parser supports HTTP pipelining, but the asynchronous Connection layer is unaware of HTTP pipelining. Specifically, the Connection layer is unaware that it has begun processing a later request before it has finished processing an earlier request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://cwe.mitre.org/data/definitions/372.html; https://github.com/0xhebi/CVEs/blob/main/Crow/CVE-2022-38667.md; https://github.com/CrowCpp/Crow/pull/524
CVE: CVE-2022-38668
Published: 2022-08-22
Description: HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://github.com/0xhebi/CVEs/blob/main/Crow/CVE-2022-38668.md; https://github.com/CrowCpp/Crow/pull/523; https://gynvael.coldwind.pl/?id=752
CVE: CVE-2022-2923
Published: 2022-08-22
Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e; https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/
CVE: CVE-2022-35191
Published: 2022-08-23
Description: D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a crafted HTTP connection request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404
References: http://d-link.com; http://wireless.com; https://pastebin.com/wD1UfaZz
CVE: CVE-2019-25075
Published: 2022-08-23
Description: HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gravitee-io/gravitee-api-management; https://medium.com/%40maxime.escourbiac/write-up-of-path-traversal-on-gravitee-io-8835941be69f; https://github.com/gravitee-io/gravitee-api-management
CVE: CVE-2021-28861
Published: 2022-08-23
Description: Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."
CVSS Score: 7.4 (HIGH)
CWE: CWE-601, CWE-601
References: https://bugs.python.org/issue43223; https://github.com/python/cpython/pull/24848; https://github.com/python/cpython/pull/93879
CVE: CVE-2021-42232
Published: 2022-08-23
Description: TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. This will cause an attacker to execute arbitrary commands on the router.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://archer.com; http://tp-link.com; https://github.com/mQaLeX/IoT/blob/main/tp-link/Archer%20A7%28US%29_V5_20519_tddp.md
CVE: CVE-2022-33916
Published: 2022-08-23
Description: OPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-33916.pdf; https://opcfoundation.org; https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-33916.pdf
CVE: CVE-2022-34919
Published: 2022-08-23
Description: The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/ahajnik/CVE-2022-34919; https://www.zengenti.com/; https://github.com/ahajnik/CVE-2022-34919
CVE: CVE-2020-35992
Published: 2022-08-23
Description: Fiserv Prologue through 2020-12-16 does not properly protect the database password. If an attacker were to gain access to the configuration file (specifically, the LogPassword attribute within appconfig.ini), they would be able to decrypt the password stored within the configuration file. This would yield cleartext credentials for the database (to gain access to financial records of customers stored within the database), and in some cases would allow remote login to the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://github.com/micahvandeusen/PrologueDecrypt; https://www.fiserv.com; https://github.com/micahvandeusen/PrologueDecrypt
CVE: CVE-2022-35733
Published: 2022-08-23
Description: Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://www.unimo.co.jp/table_notice/index.php?act=1&resid=[PII_REDACTED]-637355; https://jvn.jp/en/vu/JVNVU90821877/index.html; http://www.unimo.co.jp/table_notice/index.php?act=1&resid=[PII_REDACTED]-637355
CVE: CVE-2022-2829
Published: 2022-08-23
Description: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c[PII_REDACTED]8; https://huntr.dev/bounties/d6eaa453-9758-41b7-8c38-fd878d6aeab4; https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c[PII_REDACTED]8
CVE: CVE-2022-21208
Published: 2022-08-23
Description: The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1284
References: https://github.com/node-opcua/node-opcua/commit/33ca3bab4ab781392a2f8d8f5a14de9a0aa0e410; https://github.com/node-opcua/node-opcua/commit/dbcb5d5191118c22ee9c89332a94b94e6553d76b; https://github.com/node-opcua/node-opcua/pull/1149
CVE: CVE-2022-24298
Published: 2022-08-23
Description: All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/FreeOpcUa/freeopcua/issues/391; https://security.snyk.io/vuln/SNYK-UNMANAGED-FREEOPCUAFREEOPCUA-2988720; https://github.com/FreeOpcUa/freeopcua/issues/391
CVE: CVE-2022-24381
Published: 2022-08-23
Description: All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://security.snyk.io/vuln/SNYK-UNMANAGED-ASNEGOPCUASTACK-2988735; https://security.snyk.io/vuln/SNYK-UNMANAGED-ASNEGOPCUASTACK-2988735
CVE: CVE-2022-25231
Published: 2022-08-23
Description: The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/node-opcua/node-opcua/commit/7b5044b3f5866fbedc3efabd05e407352c07bd2f; https://github.com/node-opcua/node-opcua/pull/1182; https://security.snyk.io/vuln/SNYK-JS-NODEOPCUA-2988724
CVE: CVE-2022-25302
Published: 2022-08-23
Description: All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing handler for failed casting when unvalidated data is forwarded to boost::get function in OpcUaNodeIdBase.h. Exploiting this vulnerability is possible when sending a specifically crafted OPC UA message with a special encoded NodeId.
CVSS Score: 7.5 (HIGH)
References: https://security.snyk.io/vuln/SNYK-UNMANAGED-ASNEGOPCUASTACK-2988732; https://security.snyk.io/vuln/SNYK-UNMANAGED-ASNEGOPCUASTACK-2988732
CVE: CVE-2022-25304
Published: 2022-08-23
Description: All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/FreeOpcUa/python-opcua/issues/1466; https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-2988731; https://security.snyk.io/vuln/SNYK-PYTHON-OPCUA-2988730
CVE: CVE-2022-25761
Published: 2022-08-23
Description: The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/open62541/open62541/commit/b79db1ac78146fc06b0b8435773d3967de2d659c; https://github.com/open62541/open62541/pull/5173; https://github.com/open62541/open62541/releases/tag/v1.2.5
CVE: CVE-2022-25888
Published: 2022-08-23
Description: The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/locka99/opcua/pull/216; https://github.com/locka99/opcua/pull/216/commits/6fb683c5fec46c6dd347824491c4d93a229da695; https://security.snyk.io/vuln/SNYK-RUST-OPCUA-2988751
CVE: CVE-2022-27637
Published: 2022-08-23
Description: Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/vu/JVNVU96002401/index.html; https://pukiwiki.osdn.jp/?PukiWiki/Errata; https://jvn.jp/en/vu/JVNVU96002401/index.html
CVE: CVE-2022-34486
Published: 2022-08-23
Description: Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://jvn.jp/en/vu/JVNVU96002401/index.html; https://pukiwiki.osdn.jp/?PukiWiki/Errata; https://jvn.jp/en/vu/JVNVU96002401/index.html
CVE: CVE-2022-36350
Published: 2022-08-23
Description: Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN43979089/index.html; https://pukiwiki.osdn.jp/?PukiWiki/Errata; https://jvn.jp/en/jp/JVN43979089/index.html
CVE: CVE-2022-2796
Published: 2022-08-23
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.4.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/2fd46859c1def6b5ab79ae2b9cb88c309769443d; https://huntr.dev/bounties/69d56ec3-8370-44cf-9732-4065e3076097; https://github.com/pimcore/pimcore/commit/2fd46859c1def6b5ab79ae2b9cb88c309769443d
CVE: CVE-2022-1989
Published: 2022-08-23
Description: All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17142&token=a3696ab41fef800d2eaee8043d40d5fbe94277fd&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17142&token=a3696ab41fef800d2eaee8043d40d5fbe94277fd&download=
CVE: CVE-2022-28817
Published: 2022-08-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: No impact could be verified. Notes: none
CVE: CVE-2022-2956
Published: 2022-08-23
Description: A vulnerability classified as problematic has been found in ConsoleTVs Noxen. Affected is an unknown function of the file /Noxen-master/users.php. The manipulation of the argument create_user_username with the input "><script>alert(/xss/)</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-207000.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/whiex/Noxen; https://vuldb.com/?id.207000; https://github.com/whiex/Noxen
CVE: CVE-2021-42627
Published: 2022-08-23
Description: The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.
CVSS Score: 9.8 (CRITICAL)
References: http://d-link.com; http://dlink.com; https://github.com/sanjokkarki/D-Link-DIR-615/blob/main/CVE-2021-42627
CVE: CVE-2022-35203
Published: 2022-08-23
Description: An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: http://trendnet.com; http://tv-ip572pi.com; https://medium.com/%40shrutukapoor25/cve-2022-35203-2372a0728279
CVE: CVE-2022-36261
Published: 2022-08-23
Description: An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/chasingboy/cms-pentest/blob/main/taocms-arbitrary-file-deletion-vulnerability.md; https://github.com/chasingboy/cms-pentest/blob/main/taocms-arbitrary-file-deletion-vulnerability.md?by=xboy%28topsec%29; https://github.com/chasingboy/cms-pentest/blob/main/taocms-arbitrary-file-deletion-vulnerability.md
CVE: CVE-2022-37199
Published: 2022-08-23
Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jflyfox/jfinal_cms/issues/48; https://github.com/jflyfox/jfinal_cms/issues/48
CVE: CVE-2022-37223
Published: 2022-08-23
Description: JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jflyfox/jfinal_cms/issues/49; https://github.com/jflyfox/jfinal_cms/issues/49
CVE: CVE-2022-35278
Published: 2022-08-23
Description: In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://lists.apache.org/thread/bh6y81wtotg75337bpvxcjy436zfgf3n; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lists.apache.org/thread/bh6y81wtotg75337bpvxcjy436zfgf3n
CVE: CVE-2020-35509
Published: 2022-08-23
Description: A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20, CWE-295
References: https://access.redhat.com/security/cve/cve-2020-35509; https://access.redhat.com/security/cve/cve-2020-35509
CVE: CVE-2021-20298
Published: 2022-08-23
Description: A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-787
References: https://access.redhat.com/security/cve/CVE-2021-20298; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25913; https://bugzilla.redhat.com/show_bug.cgi?id=1939156
CVE: CVE-2021-20304
Published: 2022-08-23
Description: A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://access.redhat.com/security/cve/CVE-2021-20304; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26229; https://bugzilla.redhat.com/show_bug.cgi?id=1939157