deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-22811
Published: 2022-02-09
Description: A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions, leading to the override of the system�s configurations when an attacker persuades a user to visit a rogue website. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04
CVE: CVE-2022-22812
Published: 2022-02-09
Description: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04
CVE: CVE-2022-22813
Published: 2022-02-09
Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03
CVE: CVE-2022-23047
Published: 2022-02-09
Description: Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site Title" and "Site Header" parameters while updating the site settings on "/exponentcms/administration/configure_site"
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exponentcms.lighthouseapp.com/projects/61783/tickets/1459; https://fluidattacks.com/advisories/franklin/; https://github.com/exponentcms/exponent-cms/issues/1546
CVE: CVE-2022-23048
Published: 2022-02-09
Description: Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload it, the PHP file will be placed at "themes/simpletheme/{rce}.php" from where can be accessed in order to execute commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://exponentcms.lighthouseapp.com/projects/61783/tickets/1460; https://fluidattacks.com/advisories/dylan/; https://github.com/exponentcms/exponent-cms/issues/1546
CVE: CVE-2022-23049
Published: 2022-02-09
Description: Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in. When an administrator user visits the "User Sessions" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exponentcms.lighthouseapp.com/projects/61783/tickets/1461; https://fluidattacks.com/advisories/cobain/; https://github.com/exponentcms/exponent-cms/issues/1546
CVE: CVE-2022-24310
Published: 2022-02-09
Description: A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
CVE: CVE-2022-24311
Published: 2022-02-09
Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01; https://www.zerodayinitiative.com/advisories/ZDI-22-320/; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
CVE: CVE-2022-24312
Published: 2022-02-09
Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01; https://www.zerodayinitiative.com/advisories/ZDI-22-321/; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
CVE: CVE-2022-24313
Published: 2022-02-09
Description: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01; https://www.zerodayinitiative.com/advisories/ZDI-22-325/; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
CVE: CVE-2022-24314
Published: 2022-02-09
Description: A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
CVE: CVE-2022-24315
Published: 2022-02-09
Description: A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01; https://www.zerodayinitiative.com/advisories/ZDI-22-322/; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
CVE: CVE-2022-24316
Published: 2022-02-09
Description: A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01; https://www.zerodayinitiative.com/advisories/ZDI-22-323/; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
CVE: CVE-2022-24317
Published: 2022-02-09
Description: A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01; https://www.zerodayinitiative.com/advisories/ZDI-22-324/; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-01
CVE: CVE-2022-24318
Published: 2022-02-09
Description: A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated versions of the ViewX client are used. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
CVSS Score: 7.5 (HIGH)
CWE: CWE-326, CWE-326
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05
CVE: CVE-2022-24319
Published: 2022-02-09
Description: A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0018/MNDT-2022-0018.md; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05
CVE: CVE-2022-24320
Published: 2022-02-09
Description: A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA database server are intercepted. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0019/MNDT-2022-0019.md; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05
CVE: CVE-2022-24321
Published: 2022-02-09
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 2019 (All Versions), EcoStruxure Geo SCADA Expert 2020 (All Versions)
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-05
CVE: CVE-2022-24666
Published: 2022-02-09
Description: A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS frame where the frame contains priority information without any other data. This logical error caused confusion about the size of the frame, leading to a parsing error. This parsing error immediately crashes the entire process. Sending a HEADERS frame with HTTP/2 priority information does not require any special permission, so any HTTP/2 connection peer may send such a frame. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send an appropriately crafted frame. The impact on availability is high: receiving the frame immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send appropriately crafted frames, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself: swift-nio-http2 is parsing the frame in memory-safe code, so the crash is safe. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle the condition. The issue was found by automated fuzzing by oss-fuzz.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: https://github.com/apple/swift-nio-http2/security/advisories/GHSA-ccw9-q5h2-8c2w; https://github.com/apple/swift-nio-http2/security/advisories/GHSA-ccw9-q5h2-8c2w
CVE: CVE-2022-24667
Published: 2022-02-09
Description: A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. There are a number of implementation errors in the parsing of HPACK-encoded header blocks that allow maliciously crafted HPACK header blocks to cause crashes in processes using swift-nio-http2. Each of these crashes is triggered instead of an integer overflow. A malicious HPACK header block could be sent on any of the HPACK-carrying frames in a HTTP/2 connection (HEADERS and PUSH_PROMISE), at any position. Sending a HPACK header block does not require any special permission, so any HTTP/2 connection peer may send one. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send an appropriately crafted field block. The impact on availability is high: receiving a frame carrying this field block immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send appropriately crafted field blocks, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself: swift-nio-http2 is parsing the field block in memory-safe code and the crash is triggered instead of an integer overflow. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle all conditions in the function. The principal issue was found by automated fuzzing by oss-fuzz, but several associated bugs in the same code were found by code audit and fixed at the same time
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://github.com/apple/swift-nio-http2/security/advisories/GHSA-w3f6-pc54-gfw7; https://github.com/apple/swift-nio-http2/security/advisories/GHSA-w3f6-pc54-gfw7
CVE: CVE-2022-24668
Published: 2022-02-09
Description: A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical error after frame parsing but before frame handling. ORIGIN and ALTSVC frames are not currently supported by swift-nio-http2, and should be ignored. However, one code path that encounters them has a deliberate trap instead. This was left behind from the original development process and was never removed. Sending an ALTSVC or ORIGIN frame does not require any special permission, so any HTTP/2 connection peer may send such a frame. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send one of these frames. The impact on availability is high: receiving the frame immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send these frames, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself. This is a controlled, intentional crash. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle the condition. The issue was found by automated fuzzing by oss-fuzz.
CVSS Score: 7.5 (HIGH)
CWE: CWE-241
References: https://github.com/apple/swift-nio-http2/security/advisories/GHSA-pgfx-g6rc-8cjv; https://github.com/apple/swift-nio-http2/security/advisories/GHSA-pgfx-g6rc-8cjv
CVE: CVE-2021-25992
Published: 2022-02-10
Description: In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible for an attacker to reuse the admin cookies either via local/network access or by other hypothetical attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://github.com/ifmeorg/ifme/commit/014f6d3526a594109d4d6607c2f30b1865e37611; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25992; https://github.com/ifmeorg/ifme/commit/014f6d3526a594109d4d6607c2f30b1865e37611
CVE: CVE-2022-0558
Published: 2022-02-10
Description: Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/14a1bb971bcb8b5456c2bf0020c3018907a2704d; https://huntr.dev/bounties/8fffc95f-14ae-457b-aecc-be4716a8b91c; https://github.com/microweber/microweber/commit/14a1bb971bcb8b5456c2bf0020c3018907a2704d
CVE: CVE-2021-45901
Published: 2022-02-10
Description: The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: http://packetstormsecurity.com/files/165989/ServiceNow-Orlando-Username-Enumeration.html; https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/servicenow-username-enumeration-vulnerability-cve-2021-45901/; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/
CVE: CVE-2022-24111
Published: 2022-02-10
Description: In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and portfolios created on the site and institution levels can be viewed without requiring a login if the URL to these portfolios is known.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://bugs.launchpad.net/mahara/+bug/1959146; https://mahara.org/interaction/forum/topic.php?id=8996; https://bugs.launchpad.net/mahara/+bug/1959146
CVE: CVE-2021-31814
Published: 2022-02-10
Description: In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-306
References: https://advisories.stormshield.eu/; https://advisories.stormshield.eu/2021-019/; https://advisories.stormshield.eu/
CVE: CVE-2021-37613
Published: 2022-02-10
Description: Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service.
CVSS Score: 6.5 (MEDIUM)
References: https://advisories.stormshield.eu; https://advisories.stormshield.eu/2021-050/; https://advisories.stormshield.eu
CVE: CVE-2021-3398
Published: 2022-02-10
Description: Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-190
References: https://advisories.stormshield.eu/2021-001/; https://www.stormshield.com/category/alert/; https://advisories.stormshield.eu/2021-001/
CVE: CVE-2021-41445
Published: 2022-02-10
Description: A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://d-link.com; http://dir-x1860.com; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283
CVE: CVE-2021-44892
Published: 2022-02-10
Description: A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obtain server control privileges.
CVSS Score: 8.8 (HIGH)
References: https://github.com/Stakcery/Web-Security/issues/1; https://github.com/Stakcery/Web-Security/issues/1
CVE: CVE-2021-45357
Published: 2022-02-10
Description: Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Piwigo/Piwigo/issues/1582; https://github.com/Piwigo/Piwigo/issues/1582
CVE: CVE-2022-0011
Published: 2022-02-10
Description: PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category. This is done by creating a custom URL category list or by using an external dynamic list (EDL) in a URL Filtering profile. When the entries in these lists have a hostname pattern that does not end with a forward slash (/) or a hostname pattern that ends with an asterisk (*), any URL that starts with the specified pattern is considered a match. Entries with a caret (^) at the end of a hostname pattern match any top level domain. This may inadvertently allow or block more URLs than intended and allowing more URLs than intended represents a security risk. For example: example.com will match example.com.website.test example.com.* will match example.com.website.test example.com.^ will match example.com.test You should take special care when using such entries in policy rules that allow traffic. Where possible, use the exact list of hostname names ending with a forward slash (/) instead of using wildcards. PAN-OS 10.1 versions earlier than PAN-OS 10.1.3; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 9.1 versions earlier than PAN-OS 9.1.12; all PAN-OS 9.0 versions; PAN-OS 8.1 versions earlier than PAN-OS 8.1.21, and Prisma Access 2.2 and 2.1 versions do not allow customers to change this behavior without changing the URL category list or EDL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-436, CWE-436
References: https://security.paloaltonetworks.com/CVE-2022-0011; https://security.paloaltonetworks.com/CVE-2022-0011
CVE: CVE-2022-0016
Published: 2022-02-10
Description: An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms.
CVSS Score: 7.4 (HIGH)
CWE: CWE-703, CWE-755
References: https://security.paloaltonetworks.com/CVE-2022-0016; https://security.paloaltonetworks.com/CVE-2022-0016