deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-25076
Published: 2023-03-30
Description: A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df74a07b498819ba). A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/dlundquist/sniproxy/commit/f8d9a433fe22ab2fa15c00179048ab02ae23d583; https://lists.debian.org/debian-lts-announce/2023/04/msg00030.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1731
CVE: CVE-2022-30350
Published: 2023-03-30
Description: Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Online tool provides users with a "white out" functionality for redacting images, text, and other graphics from a PDF document. However, this mechanism does not remove underlying text or PDF object specification information from the PDF. As a result, for example, redacted text may be copy-pasted by a PDF reader.
CVSS Score: 7.5 (HIGH)
CWE: CWE-213
References: https://arxiv.org/pdf/2206.02285.pdf; https://www.pdfescape.com/open/; https://arxiv.org/pdf/2206.02285.pdf
CVE: CVE-2022-30351
Published: 2023-03-30
Description: PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supplied PDF file, does not properly sanitize this information in all cases, causing redacted information, including images and text embedded in the PDF file, to be leaked unintentionally. In cases where PDF text objects are present it is possible to copy-paste redacted information into the system clipboard. Once a document is "locked" and marked for redaction once, all redactions performed after this feature is triggered are vulnerable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116, CWE-1116
References: https://arxiv.org/pdf/2206.02285.pdf; https://www.pdfzorro.com/pdf-edit/; https://arxiv.org/pdf/2206.02285.pdf
CVE: CVE-2023-22845
Published: 2023-03-30
Description: An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1708
CVE: CVE-2023-24472
Published: 2023-03-30
Description: A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide malicious input to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1709; https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html
CVE: CVE-2023-24473
Published: 2023-03-30
Description: An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1707; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1707; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1707
CVE: CVE-2022-43473
Published: 2023-03-30
Description: A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve 
a malicious XML payload to trigger this vulnerability.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-611
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1685; https://www.manageengine.com/itom/advisory/cve-2022-43473.html; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1685
CVE: CVE-2023-29059
Published: 2023-03-30
Description: 3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX DesktopApp Electron macOS application.
CVSS Score: 7.8 (HIGH)
References: https://cwe.mitre.org/data/definitions/506.html; https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/; https://www.3cx.com/blog/news/desktopapp-security-alert/
CVE: CVE-2022-23522
Published: 2023-03-30
Description: MindsDB is an open source machine learning platform. An unsafe extraction is being performed using `shutil.unpack_archive()` from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. This vulnerability is sometimes called a **TarSlip** or a **ZipSlip variant**. Unpacking files using the high-level function `shutil.unpack_archive()` from a potentially malicious tarball without validating that the destination file path remained within the intended destination directory may cause files to be overwritten outside the destination directory. An attacker could craft a malicious tarball with a filename path, such as `../../../../../../../../etc/passwd`, and then serve the archive remotely using a personal bucket `s3`, thus, retrieve the tarball through **mindsdb** and overwrite the system files of the hosting server. This issue has been addressed in version 22.11.4.3. Users are advised to upgrade. Users unable to upgrade should avoid ingesting archives from untrusted sources.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22
References: https://github.com/mindsdb/mindsdb/security/advisories/GHSA-7x45-phmr-9wqp; https://github.com/mindsdb/mindsdb/security/advisories/GHSA-7x45-phmr-9wqp
CVE: CVE-2023-1734
Published: 2023-03-30
Description: A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-224622 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434, CWE-434
References: https://vuldb.com/?ctiid.224622; https://vuldb.com/?id.224622; https://vuldb.com/?ctiid.224622
CVE: CVE-2023-26482
Published: 2023-03-30
Description: Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defined scripts, in order to generate PDFs, invoking webhooks or running scripts on the server. Due to this combination depending on the available apps the issue can result in a RCE at the end. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. Users unable to upgrade should disable app `workflow_scripts` and `workflow_pdf_converter` as a mitigation.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-78
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h3c9-cmh8-7qpj; https://github.com/nextcloud/server/commit/5a06b50b10cc9278bbe68bbf897a0c4aeb0c4e60; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h3c9-cmh8-7qpj
CVE: CVE-2023-28643
Published: 2023-03-30
Description: Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memory cache is configured, the second share will replace the first one instead of being renamed to `{name} (2)`. It is recommended that the Nextcloud Server is upgraded to 25.0.3 or 24.0.9. Users unable to upgrade should avoid sharing 2 folders with the same name to the same user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-706, CWE-706
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hhq4-4pr8-wm27; https://github.com/nextcloud/server/issues/34015; https://github.com/nextcloud/server/pull/36047
CVE: CVE-2023-28644
Published: 2023-03-30
Description: Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an inefficient fetch operation may impact server performances and/or can lead to a denial of service. This issue has been addressed and it is recommended that the Nextcloud Server is upgraded to 25.0.3. There are no known workarounds for this vulnerability.

CVSS Score: 5.7 (MEDIUM)
CWE: CWE-400
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9wmj-gp8v-477j; https://github.com/nextcloud/server/pull/36016; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9wmj-gp8v-477j
CVE: CVE-2023-28646
Published: 2023-03-30
Description: Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and before 3.24.1 an attacker that has access to the unlocked physical device can bypass the Nextcloud Android Pin/passcode protection via a thirdparty app. This allows to see meta information like sharer, sharees and activity of files. It is recommended that the Nextcloud Android app is upgraded to 3.24.1. There are no known workarounds for this vulnerability.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-281, CWE-287
References: https://github.com/nextcloud/android/pull/11242; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v; https://github.com/nextcloud/android/pull/11242
CVE: CVE-2023-28647
Published: 2023-03-30
Description: Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7.0 when an attacker has physical access to an unlocked device, they may enable the integration into the iOS Files app and bypass the Nextcloud pin/password protection and gain access to a users files. It is recommended that the Nextcloud iOS app is upgraded to 4.7.0. There are no known workarounds for this vulnerability.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-281, CWE-287
References: https://github.com/nextcloud/ios/pull/2344; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wjgg-2v4p-2gq6; https://github.com/nextcloud/ios/pull/2344
CVE: CVE-2023-28833
Published: 2023-03-30
Description: Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was not restricted and could overwrite files in the appdata directory. Administrators may have access to overwrite these files by other means but this method could be exploited by tricking an admin into uploading a maliciously named file. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. Users unable to upgrade should avoid ingesting logo files from untrusted sources.
CVSS Score: 2.4 (LOW)
CWE: CWE-22, CWE-434
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-ch7f-px7m-hg25; https://github.com/nextcloud/server/pull/36095; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-ch7f-px7m-hg25
CVE: CVE-2023-28835
Published: 2023-03-30
Description: Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number generator, so when the sharer did not change it the password could be guessable to an attacker willing to brute force it. It is recommended that the Nextcloud Server is upgraded to 24.0.10 or 25.0.4. This issue only affects users who do not have a password policy enabled, so enabling a password policy is an effective mitigation for users unable to upgrade.
CVSS Score: 3.5 (LOW)
CWE: CWE-338
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w2p-rp9m-9xp9; https://github.com/nextcloud/server/pull/36093; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w2p-rp9m-9xp9
CVE: CVE-2022-47542
Published: 2023-03-30
Description: Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://red-gate.com; https://www.red-gate.com/privacy-and-security/vulnerabilities/2023-01-31-sql-monitor; https://red-gate.com
CVE: CVE-2023-1735
Published: 2023-03-30
Description: A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-224623.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?ctiid.224623; https://vuldb.com/?id.224623; https://vuldb.com/?ctiid.224623
CVE: CVE-2023-1736
Published: 2023-03-30
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this issue is some unknown functionality of the file cart/controller.php?action=add. The manipulation of the argument PROID leads to sql injection. The identifier of this vulnerability is VDB-224624.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?ctiid.224624; https://vuldb.com/?id.224624; https://www.sourcecodester.com/php/12684/young-entrepreneur-e-negosyo-system.html
CVE: CVE-2023-1737
Published: 2023-03-30
Description: A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-224625 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?ctiid.224625; https://vuldb.com/?id.224625; https://vuldb.com/?ctiid.224625
CVE: CVE-2023-26692
Published: 2023-03-30
Description: ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Management System (ZBBS) 4.14k is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/171787/ZCBS-ZBBS-ZPBS-4.14k-Cross-Site-Scripting.html; https://github.com/bigzooooz/CVE-2023-26692#readme; http://packetstormsecurity.com/files/171787/ZCBS-ZBBS-ZPBS-4.14k-Cross-Site-Scripting.html
CVE: CVE-2023-27533
Published: 2023-03-30
Description: A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-75, CWE-74
References: https://hackerone.com/reports/1891474; https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
CVE: CVE-2023-27534
Published: 2023-03-30
Description: A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/1892351; https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
CVE: CVE-2023-27535
Published: 2023-03-30
Description: An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-305, CWE-287
References: https://hackerone.com/reports/1892780; https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
CVE: CVE-2023-27536
Published: 2023-03-30
Description: An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-305, CWE-287
References: https://hackerone.com/reports/1895135; https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
CVE: CVE-2023-27537
Published: 2023-03-30
Description: A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://hackerone.com/reports/1897203; https://security.gentoo.org/glsa/202310-12; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-27538
Published: 2023-03-30
Description: An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-305, CWE-287
References: https://hackerone.com/reports/1898475; https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html; https://security.gentoo.org/glsa/202310-12
CVE: CVE-2023-28462
Published: 2023-03-30
Description: A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and newer (Community), when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.payara.fish/vulnerability-affecting-server-environments-on-java-1.8-on-updates-lower-than-1.8u191; https://blog.payara.fish/vulnerability-affecting-server-environments-on-java-1.8-on-updates-lower-than-1.8u191
CVE: CVE-2023-28846
Published: 2023-03-30
Description: Unpoly is a JavaScript framework for server-side web applications. There is a possible Denial of Service (DoS) vulnerability in the `unpoly-rails` gem that implements the Unpoly server protocol for Rails applications. This issues affects Rails applications that operate as an upstream of a load balancer's that uses passive health checks. The `unpoly-rails` gem echoes the request URL as an `X-Up-Location` response header. By making a request with exceedingly long URLs (paths or query string), an attacker can cause unpoly-rails to write a exceedingly large response header.  If the response header is too large to be parsed by a load balancer downstream of the Rails application, it may cause the load balancer to remove the upstream from a load balancing group. This causes that application instance to become unavailable until a configured timeout is reached or until an active healthcheck succeeds. This issue has been fixed and released as version 2.7.2.2 which is available via RubyGems and GitHub. Users unable to upgrade may: Configure your load balancer to use active health checks, e.g. by periodically requesting a route with a known response that indicates healthiness; Configure your load balancer so the maximum size of response headers is at least twice the maximum size of a URL; or instead of changing your server configuration you may also configure your Rails application to delete redundant `X-Up-Location` headers set by unpoly-rails.

CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: https://docs.nginx.com/nginx/admin-guide/load-balancer/http-health-check/#passive-health-checks; https://github.com/unpoly/unpoly-rails/; https://github.com/unpoly/unpoly-rails/commit/cd9ad0007daceeb3b2354fdcab4f88350427bf16
CVE: CVE-2022-4744
Published: 2023-03-30
Description: A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-460, CWE-415
References: http://packetstormsecurity.com/files/171912/CentOS-Stream-9-Missing-Kernel-Security-Fix.html; https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=158b515f703e; https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE: CVE-2023-1393
Published: 2023-03-30
Description: A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2/