deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36343
Published: 2022-08-01
Description: Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
CVSS Score: 3.4 (LOW)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/enable-svg-webp-ico-upload/wordpress-enable-svg-webp-ico-upload-plugin-1-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/enable-svg-webp-ico-upload/#developers; https://patchstack.com/database/vulnerability/enable-svg-webp-ico-upload/wordpress-enable-svg-webp-ico-upload-plugin-1-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-2571
Published: 2022-08-01
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://github.com/vim/vim/commit/a6f9e300161f4cb54713da22f65b261595e8e614; https://huntr.dev/bounties/2e5a1dc4-2dfb-4e5f-8c70-e1ede21f3571; https://github.com/vim/vim/commit/a6f9e300161f4cb54713da22f65b261595e8e614
CVE: CVE-2022-2580
Published: 2022-08-01
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://github.com/vim/vim/commit/1e56bda9048a9625bce6e660938c834c5c15b07d; https://huntr.dev/bounties/c5f2f1d4-0441-4881-b19c-055acaa16249; https://github.com/vim/vim/commit/1e56bda9048a9625bce6e660938c834c5c15b07d
CVE: CVE-2022-2581
Published: 2022-08-01
Description: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/vim/vim/commit/f50940531dd57135fe60aa393ac9d3281f352d88; https://huntr.dev/bounties/0bedbae2-82ae-46ae-aa68-1c28b309b60b; https://github.com/vim/vim/commit/f50940531dd57135fe60aa393ac9d3281f352d88
CVE: CVE-2022-2589
Published: 2022-08-01
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/beancount/fava/commit/68bbb6e39319deb35ab9f18d0b6aa9fa70472539; https://huntr.dev/bounties/8705800d-cf2f-433d-9c3e-dbef6a3f7e08; https://github.com/beancount/fava/commit/68bbb6e39319deb35ab9f18d0b6aa9fa70472539
CVE: CVE-2022-2595
Published: 2022-08-01
Description: Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-285
References: https://github.com/kromitgmbh/titra/commit/fe8c3cdeb70e53b9f38f1022186ab16324d332c5; https://huntr.dev/bounties/1c6afb84-2025-46d8-9e9f-cbfc20e5d04d; https://github.com/kromitgmbh/titra/commit/fe8c3cdeb70e53b9f38f1022186ab16324d332c5
CVE: CVE-2022-2596
Published: 2022-08-01
Description: Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://github.com/node-fetch/node-fetch/commit/[PII_REDACTED]2baee467e042e168d92597b5bbbe3d; https://huntr.dev/bounties/a7e6a136-0a4b-46c4-ad20-802f1dd60bf7; https://github.com/node-fetch/node-fetch/commit/[PII_REDACTED]2baee467e042e168d92597b5bbbe3d
CVE: CVE-2022-2598
Published: 2022-08-01
Description: Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/vim/vim/commit/4e677b9c40ccbc5f090971b31dc2fe07bf05541d; https://huntr.dev/bounties/2f08363a-47a2-422d-a7de-ce96a89ad08e; https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE: CVE-2022-30698
Published: 2022-08-01
Description: NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain that updates Unbound's delegation cache. This action can be repeated before expiry of the delegation information by querying Unbound for a second level subdomain which the rogue nameserver provides new delegation information. Since Unbound is a child-centric resolver, the ever-updating child delegation information can keep a rogue domain name resolvable long after revocation. From version 1.16.2 on, Unbound checks the validity of parent delegation records before using cached delegation information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-613
References: https://lists.debian.org/debian-lts-announce/2023/03/msg00024.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L3ZFWZZFPBIL654BG75RWXUMPFQJ5EC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D35CX4SCZVNKZTWJXPDFTHWZHINMGEZD/
CVE: CVE-2022-30699
Published: 2022-08-01
Description: NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue nameserver delays the response so that the cached delegation information is expired. Upon receiving the delayed answer containing the delegation information, Unbound overwrites the now expired entries. This action can be repeated when the delegation information is about to expire making the rogue delegation information ever-updating. From version 1.16.2 on, Unbound stores the start time for a query and uses that to decide if the cached delegation information can be overwritten.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-613
References: https://lists.debian.org/debian-lts-announce/2023/03/msg00024.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L3ZFWZZFPBIL654BG75RWXUMPFQJ5EC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D35CX4SCZVNKZTWJXPDFTHWZHINMGEZD/
CVE: CVE-2022-33955
Published: 2022-08-01
Description: IBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code due using a back and refresh attack. IBM X-Force ID: 229312.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229312; https://www.ibm.com/support/pages/node/6608186; https://www.ibm.com/support/pages/node/6608190
CVE: CVE-2022-34161
Published: 2022-08-01
Description: IBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 229331.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229331; https://www.ibm.com/support/pages/node/6608192; https://www.ibm.com/support/pages/node/6608194
CVE: CVE-2022-34162
Published: 2022-08-01
Description: IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 229332.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229332; https://www.ibm.com/support/pages/node/6608196; https://www.ibm.com/support/pages/node/6608198
CVE: CVE-2022-34163
Published: 2022-08-01
Description: IBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 229333.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229333; https://www.ibm.com/support/pages/node/6608200; https://www.ibm.com/support/pages/node/6608202
CVE: CVE-2022-34164
Published: 2022-08-01
Description: IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation. IBM X-Force ID: 229338.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229338; https://www.ibm.com/support/pages/node/6608204; https://www.ibm.com/support/pages/node/6608206
CVE: CVE-2022-34307
Published: 2022-08-01
Description: IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 229436.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-311
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229436; https://www.ibm.com/support/pages/node/6608208; https://www.ibm.com/support/pages/node/6608210
CVE: CVE-2022-31109
Published: 2022-08-01
Description: laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Applications that use Diactoros, and are either not behind a proxy, or can be accessed via untrusted proxies, can potentially have the host, protocol, and/or port of a `Laminas\Diactoros\Uri` instance associated with the incoming server request modified to reflect values from `X-Forwarded-*` headers. Such changes can potentially lead to XSS attacks (if a fully-qualified URL is used in links) and/or URL poisoning. Since the `X-Forwarded-*` headers do have valid use cases, particularly in clustered environments using a load balancer, the library offers mitigation measures only in the v2 releases, as doing otherwise would break these use cases immediately. Users of v2 releases from 2.11.1 can provide an additional argument to `Laminas\Diactoros\ServerRequestFactory::fromGlobals()` in the form of a `Laminas\Diactoros\RequestFilter\RequestFilterInterface` instance, including the shipped `Laminas\Diactoros\RequestFilter\NoOpRequestFilter` implementation which ignores the `X-Forwarded-*` headers. Starting in version 3.0, the library will reverse behavior to use the `NoOpRequestFilter` by default, and require users to opt-in to `X-Forwarded-*` header usage via a configured `Laminas\Diactoros\RequestFilter\LegacyXForwardedHeaderFilter` instance. Users are advised to upgrade to version 2.11.1 or later to resolve this issue. Users unable to upgrade may configure web servers to reject `X-Forwarded-*` headers at the web server level.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-444
References: https://github.com/laminas/laminas-diactoros/commit/25b11d422c2e5dad868f[PII_REDACTED]3b30f91e2d; https://github.com/laminas/laminas-diactoros/security/advisories/GHSA-8274-h5jp-97vr; https://portswigger.net/web-security/host-header
CVE: CVE-2022-31128
Published: 2022-08-01
Description: Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions Tuleap does not properly verify permissions when creating branches with the REST API in Git repositories using the fine grained permissions. Users can create branches via the REST endpoint `POST git/:id/branches` regardless of the permissions set on the repository. This issue has been fixed in version 13.10.99.82 Tuleap Community Edition as well as in version 13.10-3 of Tuleap Enterprise Edition. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://github.com/Enalean/tuleap/commit/58ecb1dee1c46075d3e089980301ebfbe0bafd33; https://github.com/Enalean/tuleap/security/advisories/GHSA-2p49-vgcx-5w79; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=58ecb1dee1c46075d3e089980301ebfbe0bafd33
CVE: CVE-2022-31148
Published: 2022-08-01
Description: Shopware is an open source e-commerce software. In versions from 5.7.0 a persistent cross site scripting (XSS) vulnerability exists in the customer module. Users are recommend to update to the current version 5.7.14. You can get the update to 5.7.14 regularly via the Auto-Updater or directly via the download overview. There are no known workarounds for this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-07-2022; https://github.com/shopware/shopware/commit/[PII_REDACTED]648fba7b39371a70816afae2e07daf; https://github.com/shopware/shopware/security/advisories/GHSA-5834-xv5q-cgfw
CVE: CVE-2022-31154
Published: 2022-08-01
Description: Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any other Sourcegraph user. This includes being able to edit both the trigger and the action of the monitor in question. An attacker is not able to read contents of existing code monitors, only override the data. The issue is fixed in Sourcegraph 3.42. There are no workaround for the issue and patching is highly recommended.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://github.com/sourcegraph/sourcegraph/pull/37526; https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-5866-hhq9-9hpc; https://github.com/sourcegraph/sourcegraph/pull/37526
CVE: CVE-2022-31155
Published: 2022-08-01
Description: Sourcegraph is an opensource code search and navigation engine. In Sourcegraph versions before 3.41.0, it is possible for an attacker to delete other users’ saved searches due to a bug in the authorization check. The vulnerability does not allow the reading of other users’ saved searches, only overwriting them with attacker-controlled searches. The issue is patched in Sourcegraph version 3.41.0. There is no workaround for this issue and updating to a secure version is highly recommended.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/sourcegraph/sourcegraph/commit/2832d7882396a6295ba5803b5ef48dc7d5a24c59; https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-37qp-9jq6-f6mx; https://github.com/sourcegraph/sourcegraph/commit/2832d7882396a6295ba5803b5ef48dc7d5a24c59
CVE: CVE-2022-31173
Published: 2022-08-01
Description: Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-674
References: https://github.com/graphql-rust/juniper/blob/juniper-v0.15.10/juniper/CHANGELOG.md#01510-2022-07-28; https://github.com/graphql-rust/juniper/commit/2b609ee057be950e3454b69fadc431d120e407bb; https://github.com/graphql-rust/juniper/commit/8d28cdba6eb10f53490ba41d1b5cb40506c2de22
CVE: CVE-2022-31177
Published: 2022-08-01
Description: Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hashed passwords strings. These filters could be made by using partial hashed password strings. The response would not include the hashed passwords, but an attacker could infer partial password hashes and their respective users. This issue has been fixed in version 4.1.3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 2.7 (LOW)
CWE: CWE-200
References: https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.1.3; https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-32ff-4g79-vgfc; https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.1.3
CVE: CVE-2022-31178
Published: 2022-08-01
Description: eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x; https://github.com/elabftw/elabftw/security/advisories/GHSA-63qq-hw97-8q7x
CVE: CVE-2022-31179
Published: 2022-08-01
Description: Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injection on windows. This impacts users that use Shescape (any API function) to escape arguments for cmd.exe on Windows An attacker can omit all arguments following their input by including a line feed character (`'\n'`) in the payload. This bug has been patched in [v1.5.8] which you can upgrade to now. No further changes are required. Alternatively, line feed characters (`'\n'`) can be stripped out manually or the user input can be made the last argument (this only limits the impact).
CVSS Score: 8.1 (HIGH)
CWE: CWE-74
References: https://github.com/ericcornelissen/shescape/pull/332; https://github.com/ericcornelissen/shescape/releases/tag/v1.5.8; https://github.com/ericcornelissen/shescape/security/advisories/GHSA-jjc5-fp7p-6f8w
CVE: CVE-2022-31180
Published: 2022-08-01
Description: Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolating output. This issue only impacts users that use the `escape` or `escapeAll` functions with the `interpolation` option set to `true`. The result is that if an attacker is able to include whitespace in their input they can: 1. Invoke shell-specific behaviour through shell-specific special characters inserted directly after whitespace. 2. Invoke shell-specific behaviour through shell-specific special characters inserted or appearing after line terminating characters. 3. Invoke arbitrary commands by inserting a line feed character. 4. Invoke arbitrary commands by inserting a carriage return character. Behaviour number 1 has been patched in [v1.5.7] which you can upgrade to now. No further changes are required. Behaviour number 2, 3, and 4 have been patched in [v1.5.8] which you can upgrade to now. No further changes are required. The best workaround is to avoid having to use the `interpolation: true` option - in most cases using an alternative is possible, see [the recipes](https://github.com/ericcornelissen/shescape#recipes) for recommendations. Alternatively, users may strip all whitespace from user input. Note that this is error prone, for example: for PowerShell this requires stripping `'\u0085'` which is not included in JavaScript's definition of `\s` for Regular Expressions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/ericcornelissen/shescape/pull/322; https://github.com/ericcornelissen/shescape/pull/324; https://github.com/ericcornelissen/shescape/releases/tag/v1.5.7
CVE: CVE-2022-31181
Published: 2022-08-01
Description: PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7. Users are advised to upgrade. Users unable to upgrade may delete the MySQL Smarty cache feature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/PrestaShop/PrestaShop/commit/b6d96e7c2a4e35a44e96ffbcdfd34439b56af804; https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.7; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-hrgx-p36p-89q4
CVE: CVE-2022-31182
Published: 2022-08-01
Description: Discourse is the an open source discussion platform. In affected versions a maliciously crafted request for static assets could cause error responses to be cached by Discourse's default NGINX proxy configuration. A corrected NGINX configuration is included in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/discourse/discourse/commit/7af25544c3940c4d046c51f4cfac9c72a06d4f50; https://github.com/discourse/discourse/security/advisories/GHSA-4ff8-3j78-w6pp; https://github.com/discourse/discourse/commit/7af25544c3940c4d046c51f4cfac9c72a06d4f50
CVE: CVE-2022-31183
Published: 2022-08-01
Description: fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode `TLSSocket` using `fs2-io` on Node.js, the parameter `requestCert = true` is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. `fs2-io` running on Node.js. The JVM TLS implementation is completely independent. 2. `TLSSocket`s in server-mode. Client-mode `TLSSocket`s are implemented via a different API. 3. mTLS as enabled via `requestCert = true` in `TLSParameters`. The default setting is `false` for server-mode `TLSSocket`s. It was introduced with the initial Node.js implementation of fs2-io in 3.1.0. A patch is released in v3.2.11. The requestCert = true parameter is respected and the peer certificate is verified. If verification fails, a SSLException is raised. If using an unpatched version on Node.js, do not use a server-mode TLSSocket with requestCert = true to establish a mTLS connection.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://github.com/nodejs/node/issues/43994; https://github.com/typelevel/fs2/commit/[PII_REDACTED]26a314e0a4331535dbf1ef8bef8207; https://github.com/typelevel/fs2/security/advisories/GHSA-2cpx-6pqp-wf35
CVE: CVE-2022-31184
Published: 2022-08-01
Description: Discourse is the an open source discussion platform. In affected versions an email activation route can be abused to send mass spam emails. A fix has been included in the latest stable, beta and tests-passed versions of Discourse which rate limits emails. Users are advised to upgrade. Users unable to upgrade should manually rate limit email.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/discourse/discourse/commit/af1cb735db7fb73217b85d22dbadd1bc824ac0b0; https://github.com/discourse/discourse/security/advisories/GHSA-m5w9-8gp8-2hrf; https://github.com/discourse/discourse/commit/af1cb735db7fb73217b85d22dbadd1bc824ac0b0
CVE: CVE-2022-31185
Published: 2022-08-01
Description: mprweb is a hosting platform for the makedeb Package Repository. Email addresses were found to not have been hidden, even if a user had clicked the `Hide Email Address` checkbox on their account page, or during signup. This could lead to an account's email being leaked, which may be problematic if your email needs to remain private for any reason. Users hosting their own mprweb instance will need to upgrade to the latest commit to get this fixed. Users on the official instance will already have this issue fixed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/makedeb/mprweb/commit/d13e3f2f5a9c0b0f6782f35d[PII_REDACTED]26ad77; https://github.com/makedeb/mprweb/security/advisories/GHSA-jm39-h693-678g; https://github.com/makedeb/mprweb/commit/d13e3f2f5a9c0b0f6782f35d[PII_REDACTED]26ad77