deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-38541
Published: 2022-09-13
Description: Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://announcements.bybit.com/en-US/article/bybit-improves-the-security-of-the-open-source-community-blt626818c0ee8c48a6/; https://github.com/hhyo/Archery/blob/v1.8.5/sql/urls.py#L136; https://github.com/hhyo/Archery/issues/1842
CVE: CVE-2022-38542
Published: 2022-09-13
Description: Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface. The project has released an update, please upgrade to v1.9.0 and above.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://announcements.bybit.com/en-US/article/bybit-improves-the-security-of-the-open-source-community-blt626818c0ee8c48a6/; https://github.com/hhyo/Archery/blob/v1.8.5/sql/urls.py#L149; https://github.com/hhyo/Archery/issues/1841
CVE: CVE-2022-3027
Published: 2022-09-13
Description: The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, the device can be exploited to write arbitrary files or display incorrect information.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-284
References: https://www.cisa.gov/uscert/ics/advisories/icsma-22-244-01; https://www.cisa.gov/uscert/ics/advisories/icsma-22-244-01
CVE: CVE-2022-3190
Published: 2022-09-13
Description: Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-835
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3190.json; https://gitlab.com/wireshark/wireshark/-/issues/18307; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CH4NUKZKPY4MFQHFBTONJK2AWES4DFDA/
CVE: CVE-2022-35292
Published: 2022-09-13
Description: In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to a vulnerability known as Unquoted Service Path which allows a user to gain SYSTEM privileges. If the service is exploited by adversaries, it can be used to gain privileged permissions on a system or network leading to high impact on Confidentiality, Integrity, and Availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428, CWE-428
References: https://launchpad.support.sap.com/#/notes/3223392; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3223392
CVE: CVE-2022-35294
Published: 2022-09-13
Description: An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is then downloaded and viewed by other users resulting in a stored Cross-Site-Scripting attack. This could lead to information disclosure including stealing authentication information and impersonating the affected user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://launchpad.support.sap.com/#/notes/3218177; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3218177
CVE: CVE-2022-35295
Published: 2022-09-13
Description: In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for themselves.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-755, CWE-755
References: http://packetstormsecurity.com/files/170233/SAP-Host-Agent-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2022/Dec/12; https://launchpad.support.sap.com/#/notes/3159736
CVE: CVE-2022-35298
Published: 2022-09-13
Description: SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. KMC servlet is vulnerable to XSS attack. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim’s web browser session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3219164; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3219164
CVE: CVE-2022-39014
Published: 2022-09-13
Description: Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311
References: https://launchpad.support.sap.com/#/notes/3217303; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3217303
CVE: CVE-2022-39799
Published: 2022-09-13
Description: An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflected cross-site scripting attack. This could lead to stealing session information and impersonating the affected user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3229820; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3229820
CVE: CVE-2022-39801
Published: 2022-09-13
Description: SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the attacker can gain access to admin session and completely compromise the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://launchpad.support.sap.com/#/notes/3237075; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3237075
CVE: CVE-2022-3029
Published: 2022-09-13
Description: In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base 64 encoded is treated as a fatal error and causes Routinator to exit. Worst case impact of this vulnerability is denial of service for the RPKI data that Routinator provides to routers. This may stop your network from validating route origins based on RPKI data. This vulnerability does not allow an attacker to manipulate RPKI data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-241
References: https://www.nlnetlabs.nl/downloads/routinator/CVE-2022-3029.txt; https://www.nlnetlabs.nl/downloads/routinator/CVE-2022-3029.txt
CVE: CVE-2022-3170
Published: 2022-09-13
Description: An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with '\0'. A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/torvalds/linux/commit/5934d9a0383619c14df91af8fd76261dc3de2f5f; https://github.com/torvalds/linux/commit/6ab55ec0a938c7f943a4edba3d6514f775983887; https://github.com/torvalds/linux/commit/5934d9a0383619c14df91af8fd76261dc3de2f5f
CVE: CVE-2022-36020
Published: 2022-09-13
Description: The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values. Due to a parsing issue in the upstream package `masterminds/html5`, malicious markup used in a sequence with special HTML comments cannot be filtered and sanitized. This allows for a bypass of the cross-site scripting mechanism of `typo3/html-sanitizer`. This issue has been addressed in versions 1.0.7 and 2.0.16 of the `typo3/html-sanitizer` package. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TYPO3/html-sanitizer/commit/60bfdc7f9b394d0236e16ee4cea8372a7defa493; https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-47m6-46mj-p235; https://packagist.org/packages/masterminds/html5
CVE: CVE-2022-36103
Published: 2022-09-13
Description: Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepted into the Talos cluster. Due to improper validation of the request while signing a worker node CSR (certificate signing request) Talos control plane node might issue Talos API certificate which allows full access to Talos API on a control plane node. Accessing Talos API with full level access on a control plane node might reveal sensitive information which allows full level access to the cluster (Kubernetes and Talos PKI, etc.). Talos API join token is stored in the machine configuration on the worker node. When configured correctly, Kubernetes workloads don't have access to the machine configuration, but due to a misconfiguration workload might access the machine configuration and reveal the join token. This problem has been fixed in Talos 1.2.2. Enabling the Pod Security Standards mitigates the vulnerability by denying hostPath mounts and host networking by default in the baseline policy. Clusters that don't run untrusted workloads are not affected. Clusters with correct Pod Security configurations which don't allow hostPath mounts, and secure access to cloud metadata server (or machine configuration is not supplied via cloud metadata server) are not affected.
CVSS Score: 7.2 (HIGH)
CWE: CWE-732, CWE-863
References: https://github.com/siderolabs/talos/commit/9eaf33f3f274e746ca1b442c0a1a0dae0cec088f; https://github.com/siderolabs/talos/releases/tag/v1.2.2; https://github.com/siderolabs/talos/security/advisories/GHSA-7hgc-php5-77qq
CVE: CVE-2022-3179
Published: 2022-09-13
Description: Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-521
References: https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed[PII_REDACTED]c5; https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe; https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed[PII_REDACTED]c5
CVE: CVE-2022-32190
Published: 2022-09-13
Description: JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath("https://go.dev", "../go") returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://go.dev/cl/423514; https://go.dev/issue/54385; https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
CVE: CVE-2022-36104
Published: 2022-09-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as an error message from another page. This leads to a scenario in which the application is calling itself recursively - amplifying the impact of the initial attack until the limits of the web server are exceeded. Users are advised to update to TYPO3 version 11.5.16 to resolve this issue. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-770
References: https://github.com/TYPO3/typo3/commit/179dd7cd78947081d573fee2050e197faa556f13; https://github.com/TYPO3/typo3/security/advisories/GHSA-fffr-7x4x-f98q; https://typo3.org/security/advisory/typo3-core-sa-2022-006
CVE: CVE-2022-36105
Published: 2022-09-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that observing response time during user authentication (backend and frontend) can be used to distinguish between existing and non-existing user accounts. Extension authors of 3rd party TYPO3 extensions providing a custom authentication service should check if the extension is affected by the described problem. Affected extensions must implement new `MimicServiceInterface::mimicAuthUser`, which simulates corresponding times regular processing would usually take. Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix this problem. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/TYPO3/typo3/commit/f8b83ce15d4ea275a5a5e564e5d324242f7937b6; https://github.com/TYPO3/typo3/security/advisories/GHSA-m392-235j-9r7r; https://typo3.org/security/advisory/typo3-core-sa-2022-007
CVE: CVE-2022-36106
Published: 2022-09-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the expiration time of a password reset link for TYPO3 backend users has never been evaluated. As a result, a password reset link could be used to perform a password reset even if the default expiry time of two hours has been exceeded. Update to TYPO3 version 10.4.32 or 11.5.16 that fix the problem. There are no known workarounds for this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://github.com/TYPO3/typo3/commit/56af2bd3a432156c30af9be71c9d6f7ef3a6159a; https://github.com/TYPO3/typo3/security/advisories/GHSA-5959-4x58-r8c2; https://typo3.org/security/advisory/typo3-core-sa-2022-008
CVE: CVE-2022-36107
Published: 2022-09-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the `FileDumpController` (backend and frontend context) is vulnerable to cross-site scripting when malicious files are displayed using this component. A valid backend user account is needed to exploit this vulnerability. Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem. There are no known workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39; https://github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25; https://typo3.org/security/advisory/typo3-core-sa-2022-009
CVE: CVE-2022-36108
Published: 2022-09-13
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the `f:asset.css` view helper is vulnerable to cross-site scripting when user input is passed as variables to the CSS. Update to TYPO3 version 10.4.32 or 11.5.16 that fix the problem. There are no known workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/TYPO3/typo3/commit/6863f73818c36b0b88c677ba533765c8074907b4; https://github.com/TYPO3/typo3/security/advisories/GHSA-fv2m-9249-qx85; https://typo3.org/security/advisory/typo3-core-sa-2022-010
CVE: CVE-2022-39202
Published: 2022-09-13
Description: matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. The Internet Relay Chat (IRC) protocol allows you to specify multiple modes in a single mode command. Due to a bug in the underlying matrix-org/node-irc library, affected versions of matrix-appservice-irc perform parsing of such modes incorrectly, potentially resulting in the wrong user being given permissions. Mode commands can only be executed by privileged users, so this can only be abused if an operator is tricked into running the command on behalf of an attacker. The vulnerability has been patched in matrix-appservice-irc 0.35.0. As a workaround users should refrain from entering mode commands suggested by untrusted users. Avoid using multiple modes in a single command.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://github.com/matrix-org/matrix-appservice-irc/commit/5f87dbed87b4b6dc49b7965ff152ee8535719e67; https://github.com/matrix-org/matrix-appservice-irc/security/advisories/GHSA-cq7q-5c67-w39w; https://matrix.org/blog/2022/09/13/security-release-of-matrix-appservice-irc-0-35-0-high-severity/
CVE: CVE-2022-26928
Published: 2022-09-13
Description: Windows Photo Import API Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26928; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26928
CVE: CVE-2022-26929
Published: 2022-09-13
Description: .NET Framework Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26929; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26929
CVE: CVE-2022-30170
Published: 2022-09-13
Description: Windows Credential Roaming Service Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30170; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30170
CVE: CVE-2022-30196
Published: 2022-09-13
Description: Windows Secure Channel Denial of Service Vulnerability
CVSS Score: 8.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30196; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30196
CVE: CVE-2022-30200
Published: 2022-09-13
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30200; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30200
CVE: CVE-2022-33647
Published: 2022-09-13
Description: Windows Kerberos Elevation of Privilege Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647
CVE: CVE-2022-33679
Published: 2022-09-13
Description: Windows Kerberos Elevation of Privilege Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33679; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33679
CVE: CVE-2022-34100
Published: 2022-09-13
Description: A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file structure during a repair operation.
CVSS Score: 8.8 (HIGH)
References: https://www.crestron.com/Security/Security_Advisories; https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf; https://www.crestron.com/Security/Security_Advisories
CVE: CVE-2022-34700
Published: 2022-09-13
Description: Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34700; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34700
CVE: CVE-2022-34718
Published: 2022-09-13
Description: Windows TCP/IP Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34718; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34718
CVE: CVE-2022-34719
Published: 2022-09-13
Description: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34719; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34719
CVE: CVE-2022-34720
Published: 2022-09-13
Description: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34720; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34720
CVE: CVE-2022-34721
Published: 2022-09-13
Description: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34721; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34721
CVE: CVE-2022-34722
Published: 2022-09-13
Description: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34722; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34722
CVE: CVE-2022-34723
Published: 2022-09-13
Description: Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34723; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34723
CVE: CVE-2022-34724
Published: 2022-09-13
Description: Windows DNS Server Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34724; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34724
CVE: CVE-2022-34725
Published: 2022-09-13
Description: Windows ALPC Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34725; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34725
CVE: CVE-2022-34726
Published: 2022-09-13
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34726; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34726
CVE: CVE-2022-34727
Published: 2022-09-13
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34727; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34727
CVE: CVE-2022-34728
Published: 2022-09-13
Description: Windows Graphics Component Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34728; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34728
CVE: CVE-2022-34729
Published: 2022-09-13
Description: Windows GDI Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34729; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34729
CVE: CVE-2022-34730
Published: 2022-09-13
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34730; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34730
CVE: CVE-2022-34731
Published: 2022-09-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34731; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34731
CVE: CVE-2022-34732
Published: 2022-09-13
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34732; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34732
CVE: CVE-2022-34733
Published: 2022-09-13
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34733; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34733