deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31458
Published: 2023-07-25
Description: RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-116
References: https://medium.com/%40rohitgautam26/cve-2022-31458-49b7818e8ac9; https://www.acunetix.com/vulnerabilities/web/host-header-attack/; https://medium.com/%40rohitgautam26/cve-2022-31458-49b7818e8ac9
CVE: CVE-2022-46898
Published: 2023-07-25
Description: An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the "restore SQL data" filename. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. The filename provided is not properly sanitized and allows for the inclusion of a path-traversal payload that can be used to escape the intended Vocera restoration directory. An attacker could exploit this vulnerability to point to a crafted ZIP archive that contains SQL commands that could be executed against the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.stryker.com/us/en/about/governance/cyber-security/product-security/; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/vocera-report-server-vulnerabilities--cve-2022-46898--cve-2022-4.html; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/
CVE: CVE-2022-46899
Published: 2023-07-25
Description: An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any parameters with a filename entry will have their content written to a file in the Vocera upload-staging directory with the specified filename in the parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://www.stryker.com/us/en/about/governance/cyber-security/product-security/; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/vocera-report-server-vulnerabilities--cve-2022-46898--cve-2022-4.html; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/
CVE: CVE-2022-46900
Published: 2023-07-25
Description: An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Exec filename. The Vocera Report Console contains various jobs that are executed on the server at specified intervals, e.g., backup, etc. An authenticated user has the ability to modify these entries and set the executable path and parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.stryker.com/us/en/about/governance/cyber-security/product-security/; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/vocera-report-server-vulnerabilities--cve-2022-46898--cve-2022-4.html; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/
CVE: CVE-2022-46901
Published: 2023-07-25
Description: An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This includes system tasks, and backing up, loading, and clearing of the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://www.stryker.com/us/en/about/governance/cyber-security/product-security/; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/vocera-report-server-vulnerabilities--cve-2022-46898--cve-2022-4.html; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/
CVE: CVE-2022-46902
Published: 2023-07-25
Description: An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. During the unzip operation, the code takes file paths from the ZIP archive and writes them to a Vocera temporary directory. Unfortunately, the code does not properly check if the file paths include directory traversal payloads that would escape the intended destination.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.stryker.com/us/en/about/governance/cyber-security/product-security/; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/vocera-report-server-vulnerabilities--cve-2022-46898--cve-2022-4.html; https://www.stryker.com/us/en/about/governance/cyber-security/product-security/
CVE: CVE-2023-34798
Published: 2023-07-25
Description: An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://gist.github.com/Zhu013/e5e6e03613704a2a4107cc6456f1e8e2; https://gist.github.com/Zhu013/e5e6e03613704a2a4107cc6456f1e8e2
CVE: CVE-2023-37257
Published: 2023-07-25
Description: DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset have a stored cross-site scripting vulnerability. The vulnerability has been fixed in v1.18.9. There are no known workarounds.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/dataease/dataease/releases/tag/v1.18.9; https://github.com/dataease/dataease/security/advisories/GHSA-7cm3-9pp6-q2fq; https://github.com/dataease/dataease/releases/tag/v1.18.9
CVE: CVE-2023-37258
Published: 2023-07-25
Description: DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulnerability that can bypass blacklists. The vulnerability has been fixed in v1.18.9. There are no known workarounds.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/dataease/dataease/blob/dev/backend/src/main/java/io/dataease/controller/panel/AppLogController.java#L41; https://github.com/dataease/dataease/blob/dev/backend/src/main/java/io/dataease/ext/ExtDataSourceMapper.java; https://github.com/dataease/dataease/security/advisories/GHSA-r39x-fcc6-47g4
CVE: CVE-2023-37460
Published: 2023-07-25
Description: Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's source instead of its target, which will pass the verification that ensures the file will not be extracted outside of the destination directory. Later `Files.newOutputStream()`, that follows symlinks by default,  will actually write the entry's content to the symlink's target. Whoever uses plexus archiver to extract an untrusted archive is vulnerable to an arbitrary file creation and possibly remote code execution. Version 4.8.0 contains a patch for this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-61
References: https://github.com/codehaus-plexus/plexus-archiver/commit/54759839fbdf85caf8442076f001d5fd64e0dcb2; https://github.com/codehaus-plexus/plexus-archiver/releases/tag/plexus-archiver-4.8.0; https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m
CVE: CVE-2023-37677
Published: 2023-07-25
Description: Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/264; https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/264
CVE: CVE-2023-3944
Published: 2023-07-25
Description: A vulnerability was found in phpscriptpoint Lawyer 1.6 and classified as problematic. Affected by this issue is some unknown functionality of the file page.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235400. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235400; https://vuldb.com/?id.235400; https://vuldb.com/?ctiid.235400
CVE: CVE-2023-37902
Published: 2023-07-25
Description: Vyper is a Pythonic programming language that targets the Ethereum Virtual Machine (EVM). Prior to version 0.3.10, the ecrecover precompile does not fill the output buffer if the signature does not verify. However, the ecrecover builtin will still return whatever is at memory location 0. This means that the if the compiler has been convinced to write to the 0 memory location with specially crafted data (generally, this can happen with a hashmap access or immutable read) just before the ecrecover, a signature check might pass on an invalid signature. Version 0.3.10 contains a patch for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-252
References: https://github.com/vyperlang/vyper/commit/019a37ab98ff53f04fecfadf602b6cd5ac748f7f; https://github.com/vyperlang/vyper/security/advisories/GHSA-f5x6-7qgp-jhf3; https://github.com/vyperlang/vyper/commit/019a37ab98ff53f04fecfadf602b6cd5ac748f7f
CVE: CVE-2023-37907
Published: 2023-07-25
Description: Cryptomator is data encryption software for users who store their files in the cloud. Prior to version 1.9.2, the MSI installer provided on the homepage allows local privilege escalation (LPE) for low privileged users, if already installed. The problem occurs as the repair function of the MSI spawns two administrative CMDs. A simple LPE is possible via a breakout. Version 1.9.2 fixes this issue.
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: https://github.com/cryptomator/cryptomator/commit/b48ebd524b1626bf12ac98e35a7670b868fa208c; https://github.com/cryptomator/cryptomator/releases/tag/1.9.2; https://github.com/cryptomator/cryptomator/security/advisories/GHSA-9c9p-c3mg-hpjq
CVE: CVE-2023-37919
Published: 2023-07-25
Description: Cal.com is open-source scheduling software. A vulnerability allows active sessions associated with an account to remain active even after enabling 2FA. When activating 2FA on a Cal.com account that is logged in on two or more devices, the account stays logged in on the other device(s) stays logged in without having to verify the account owner's identity. As of time of publication, no known patches or workarounds exist.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-613
References: https://github.com/calcom/cal.com/security/advisories/GHSA-cpf2-q635-xrwx; https://github.com/calcom/cal.com/security/advisories/GHSA-cpf2-q635-xrwx
CVE: CVE-2023-37920
Published: 2023-07-25
Description: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345, CWE-345
References: https://github.com/certifi/python-certifi/commit/8fb96ed81f71e7097ed11bc4d9b19afd7ea5c909; https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7; https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/C-HrP1SEq1A
CVE: CVE-2023-38493
Published: 2023-07-25
Description: Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or `JettyService` with the path that may contain matrix variables. Prior to version 1.24.3, the Armeria decorators might not invoked because of the matrix variables. If an attacker sends a specially crafted request, the request may bypass the authorizer. Version 1.24.3 contains a patch for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-controller/ann-methods/matrix-variables.html; https://github.com/line/armeria/commit/039db50bbfc88014ea8737fd1e1ddd6fd3fc4f07; https://github.com/line/armeria/security/advisories/GHSA-wvp2-9ppw-337j
CVE: CVE-2023-38499
Published: 2023-07-25
Description: TYPO3 is an open source PHP based web content management system. Starting in version 9.4.0 and prior to versions 9.5.42 ELTS, 10.4.39 ELTS, 11.5.30, and 12.4.4, in multi-site scenarios, enumerating the HTTP query parameters `id` and `L` allowed out-of-scope access to rendered content in the website frontend. For instance, this allowed visitors to access content of an internal site by adding handcrafted query parameters to the URL of a site that was publicly available. TYPO3 versions 9.5.42 ELTS, 10.4.39 ELTS, 11.5.30, 12.4.4 fix the problem.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://github.com/TYPO3/typo3/commit/702e2debd4b28f9cdb540544565fe6a8627ccb6a; https://github.com/TYPO3/typo3/security/advisories/GHSA-jq6g-4v5m-wm9r; https://typo3.org/security/advisory/typo3-core-sa-2023-003
CVE: CVE-2023-38500
Published: 2023-07-25
Description: TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attributes and values. Starting in version 1.0.0 and prior to versions 1.5.1 and 2.1.2, due to an encoding issue in the serialization layer, malicious markup nested in a `noscript` element was not encoded correctly. `noscript` is disabled in the default configuration, but might have been enabled in custom scenarios. This allows bypassing the cross-site scripting mechanism of TYPO3 HTML Sanitizer. Versions 1.5.1 and 2.1.2 fix the problem.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/TYPO3/html-sanitizer/commit/e3026f589fef0be8c3574ee3f0a0bfbe33d7ebdb; https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-59jf-3q9v-rh6g; https://typo3.org/security/advisory/typo3-core-sa-2023-002
CVE: CVE-2022-31457
Published: 2023-07-25
Description: RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://medium.com/%40rohitgautam26/cve-2022-31457-2027b7678af7; https://medium.com/%40rohitgautam26/cve-2022-31457-2027b7678af7
CVE: CVE-2023-38496
Published: 2023-07-25
Description: Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft a starter config to delete any directory on the host filesystems. A security fix has been included in Apptainer 1.2.1. There is no known workaround outside of upgrading to Apptainer 1.2.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-269, CWE-271
References: https://github.com/apptainer/apptainer/pull/1523; https://github.com/apptainer/apptainer/pull/1578; https://github.com/apptainer/apptainer/security/advisories/GHSA-mmx5-32m4-wxvx
CVE: CVE-2023-38501
Published: 2023-07-25
Description: copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via URL-parameter `?k304=...` and `?setck=...`. The worst-case outcome of this is being able to move or delete existing files on the server, or upload new files, using the account of the person who clicks the malicious link. It is recommended to change the passwords of one's copyparty accounts, unless one have inspected one's logs and found no trace of attacks. Version 1.8.7 contains a patch for the issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/173821/Copyparty-1.8.6-Cross-Site-Scripting.html; https://github.com/9001/copyparty/commit/007d948cb982daa05bc6619cd20ee55b7e834c38; https://github.com/9001/copyparty/security/advisories/GHSA-f54q-j679-p9hh
CVE: CVE-2023-38502
Published: 2023-07-25
Description: TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query. This issue affects TDengine Databases which let users connect and run arbitrary queries. Version 3.0.7.1 has a patch for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/taosdata/TDengine/security/advisories/GHSA-w23f-r2fm-27hf; https://github.com/taosdata/TDengine/security/advisories/GHSA-w23f-r2fm-27hf
CVE: CVE-2023-3945
Published: 2023-07-25
Description: A vulnerability was found in phpscriptpoint Lawyer 1.6. It has been classified as problematic. This affects an unknown part of the file search.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235401 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235401; https://vuldb.com/?id.235401; https://vuldb.com/?ctiid.235401
CVE: CVE-2023-38503
Published: 2023-07-25
Description: Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.3.0 and prior to version 10.5.0, the permission filters (i.e. `user_created IS $CURRENT_USER`) are not properly checked when using GraphQL subscription resulting in unauthorized users getting event on their subscription which they should not be receiving according to the permissions. This can be any collection but out-of-the box the `directus_users` collection is configured with such a permissions filter allowing you to get updates for other users when changes happen. Version 10.5.0 contains a patch. As a workaround, disable GraphQL subscriptions.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://github.com/directus/directus/pull/19155; https://github.com/directus/directus/security/advisories/GHSA-gggm-66rh-pp98; https://github.com/directus/directus/pull/19155
CVE: CVE-2023-2640
Published: 2023-07-26
Description: On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2640; https://lists.ubuntu.com/archives/kernel-team/2023-July/140923.html; https://ubuntu.com/security/notices/USN-6250-1
CVE: CVE-2023-32629
Published: 2023-07-26
Description: Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-863
References: http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629; https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html
CVE: CVE-2023-3947
Published: 2023-07-26
Description: The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapi_encrypt_decrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated attackers to decrypt and view the meeting id and password.
CVSS Score: 3.7 (LOW)
CWE: CWE-321
References: https://plugins.trac.wordpress.org/browser/video-conferencing-with-zoom-api/tags/4.2.1/includes/helpers.php#L546; https://plugins.trac.wordpress.org/browser/video-conferencing-with-zoom-api/trunk/includes/Helpers/Encryption.php?rev=2942302; https://www.wordfence.com/threat-intel/vulnerabilities/id/ba2515d9-ced0-4b49-87c4-04c8391c2608?source=cve
CVE: CVE-2022-2502
Published: 2023-07-26
Description: A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-5 and the CMU contains the license feature ‘Advanced security’ which must be ordered separately. If these preconditions are fulfilled, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a missing input data validation which eventually if exploited causes an internal buffer to overflow in the HCI IEC 60870-5-104 function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://publisher.hitachienergy.com/preview?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-4608
Published: 2023-07-26
Description: A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://publisher.hitachienergy.com/preview?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2023-20891
Published: 2023-07-26
Description: The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. A malicious non-admin user who has access to the platform system audit logs can access hex encoded CF API admin credentials and can push new malicious versions of an application. In a default deployment non-admin users do not have access to the platform system audit logs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://www.vmware.com/security/advisories/VMSA-2023-0016.html; https://www.vmware.com/security/advisories/VMSA-2023-0016.html
CVE: CVE-2023-3946
Published: 2023-07-26
Description: 
A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 SP1 Update 1allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO.



CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kcm.trellix.com/corporate/index?page=content&id=SB10402; https://kcm.trellix.com/corporate/index?page=content&id=SB10402
CVE: CVE-2023-1401
Published: 2023-07-26
Description: An issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-201
References: https://gitlab.com/gitlab-org/gitlab/-/issues/396533; https://hackerone.com/reports/1889255; https://gitlab.com/gitlab-org/gitlab/-/issues/396533