deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2404
Published: 2022-09-26
Description: The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0d889dde-b9d5-46cf-87d3-4f8a85cf9b98; https://wpscan.com/vulnerability/0d889dde-b9d5-46cf-87d3-4f8a85cf9b98
CVE: CVE-2022-2405
Published: 2022-09-26
Description: The WP Popup Builder WordPress plugin before 1.2.9 does not have authorisation and CSRF check in an AJAX action, allowing any authenticated users, such as subscribers to delete arbitrary Popup
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/50[PII_REDACTED]-47ee-aae1-faf0724eb917; https://wpscan.com/vulnerability/50[PII_REDACTED]-47ee-aae1-faf0724eb917
CVE: CVE-2022-2903
Published: 2022-09-26
Description: The Ninja Forms Contact Form WordPress plugin before 3.6.13 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/255b98ba-5da9-4424-a7e9-c438d8905864; https://wpscan.com/vulnerability/255b98ba-5da9-4424-a7e9-c438d8905864
CVE: CVE-2022-2926
Published: 2022-09-26
Description: The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785; https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785
CVE: CVE-2022-2987
Published: 2022-09-26
Description: The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it's settings (which are hooked to the init action), allowing unauthenticated attackers to update them. Attackers could set their own LDAP server to be used to authenticated users, therefore bypassing the current authentication
CVSS Score: 7.5 (HIGH)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/0d9638b9-bf8a-474f-992d-2618884d3f67; https://wpscan.com/vulnerability/0d9638b9-bf8a-474f-992d-2618884d3f67
CVE: CVE-2022-3024
Published: 2022-09-26
Description: The Simple Bitcoin Faucets WordPress plugin through 1.7.0 does not have any authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscribers to call it and add/delete/edit Bonds. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-863, CWE-352, CWE-863
References: https://wpscan.com/vulnerability/7f43cb8e-0c1b-4528-8c5c-b81ab42778dc; https://wpscan.com/vulnerability/7f43cb8e-0c1b-4528-8c5c-b81ab42778dc
CVE: CVE-2022-3025
Published: 2022-09-26
Description: The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/66bc783b-67e1-4bd0-99c0-322873b3a22a; https://wpscan.com/vulnerability/66bc783b-67e1-4bd0-99c0-322873b3a22a
CVE: CVE-2022-3062
Published: 2022-09-26
Description: The Simple File List WordPress plugin before 4.4.12 does not escape parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2e829bbe-1843-496d-a852-4150fa6d1f7a; https://wpscan.com/vulnerability/2e829bbe-1843-496d-a852-4150fa6d1f7a
CVE: CVE-2022-3069
Published: 2022-09-26
Description: The WordLift WordPress plugin before 3.37.2 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a9918dfd-389c-43eb-afcc-03d29b42b369; https://wpscan.com/vulnerability/a9918dfd-389c-43eb-afcc-03d29b42b369
CVE: CVE-2022-3070
Published: 2022-09-26
Description: The Generate PDF WordPress plugin before 3.6 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/cd8d71d1-030e-4ad4-866e-75d242883c6c; https://wpscan.com/vulnerability/cd8d71d1-030e-4ad4-866e-75d242883c6c
CVE: CVE-2022-3074
Published: 2022-09-26
Description: The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/90ebaedc-89df-413f-b22e-753d4dd5e1c3; https://wpscan.com/vulnerability/90ebaedc-89df-413f-b22e-753d4dd5e1c3
CVE: CVE-2022-3076
Published: 2022-09-26
Description: The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin's setting, which could be used by admins of multisite blog to upload PHP files for example.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/d18e695b-4d6e-4ff6-a060-312594a0d2bd; https://wpscan.com/vulnerability/d18e695b-4d6e-4ff6-a060-312594a0d2bd
CVE: CVE-2022-3098
Published: 2022-09-26
Description: The Login Block IPs WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/f4fcf41b-c05d-4236-8e67-a52d0f94c80a; https://wpscan.com/vulnerability/f4fcf41b-c05d-4236-8e67-a52d0f94c80a
CVE: CVE-2022-3119
Published: 2022-09-26
Description: The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could allow unauthenticated attackers to update them and change the OAuth endpoints to ones they controls, allowing them to then be authenticated as admin if they know the correct email address
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-352
References: https://wpscan.com/vulnerability/55b83cee-a8a5-4f9d-a976-a3eed9a558e5; https://wpscan.com/vulnerability/55b83cee-a8a5-4f9d-a976-a3eed9a558e5
CVE: CVE-2022-3135
Published: 2022-09-26
Description: The SEO Smart Links WordPress plugin through 3.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/3505481d-141a-4516-bdbb-d4dad4e1eb01; https://wpscan.com/vulnerability/3505481d-141a-4516-bdbb-d4dad4e1eb01
CVE: CVE-2022-3295
Published: 2022-09-26
Description: Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3; https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233; https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3
CVE: CVE-2022-3299
Published: 2022-09-26
Description: A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of the patch is 724fa568435dae45ef0c3a48b2aabde052afae88. It is recommended to apply a patch to fix this issue. The identifier VDB-209545 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/open5gs/open5gs/commit/724fa568435dae45ef0c3a48b2aabde052afae88; https://github.com/open5gs/open5gs/issues/1769; https://vuldb.com/?id.209545
CVE: CVE-2022-40402
Published: 2022-09-26
Description: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_assign.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/wshark00/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-1.md; https://github.com/wshark00/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-1.md
CVE: CVE-2022-40403
Published: 2022-09-26
Description: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/feature_edit.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/wshark00/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-3.md; https://github.com/wshark00/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-3.md
CVE: CVE-2022-40404
Published: 2022-09-26
Description: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/wshark00/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-2.md; https://github.com/wshark00/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-2.md
CVE: CVE-2022-40924
Published: 2022-09-26
Description: Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/admin77888/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-1.md; https://www.exploit-db.com/exploits/51819; https://github.com/admin77888/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-1.md
CVE: CVE-2022-40925
Published: 2022-09-26
Description: Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/admin77888/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-2.md; https://github.com/admin77888/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-2.md
CVE: CVE-2022-40926
Published: 2022-09-26
Description: Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_leave_type.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/admin77888/Bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-2.md; https://github.com/admin77888/Bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-2.md
CVE: CVE-2022-40927
Published: 2022-09-26
Description: Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_designation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/admin77888/Bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-1.md; https://github.com/admin77888/Bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-1.md
CVE: CVE-2022-40928
Published: 2022-09-26
Description: Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_application.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/admin77888/Bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-3.md; https://github.com/admin77888/Bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-3.md
CVE: CVE-2021-41437
Published: 2022-09-26
Description: An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://github.com/efchatz/easy-exploits/tree/main/Web/ASUS/CVE-2021-41437; https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AX88U/HelpDesk_BIOS/; https://github.com/efchatz/easy-exploits/tree/main/Web/ASUS/CVE-2021-41437
CVE: CVE-2022-39219
Published: 2022-09-26
Description: Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests when they are normally forbidden from doing so. Version 1.8.7-release contains a patch. There are currently no known workarounds.
CVSS Score: 8.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/brokercap/Bifrost/issues/200; https://github.com/brokercap/Bifrost/releases/tag/v1.8.7-release; https://github.com/brokercap/Bifrost/security/advisories/GHSA-p6fh-xc6r-g5hw
CVE: CVE-2022-39243
Published: 2022-09-26
Description: NuProcess is an external process execution implementation for Java. In all the versions of NuProcess where it forks processes by using the JVM's Java_java_lang_UNIXProcess_forkAndExec method (1.2.0+), attackers can use NUL characters in their strings to perform command line injection. Java's ProcessBuilder isn't vulnerable because of a check in ProcessBuilder.start. NuProcess is missing that check. This vulnerability can only be exploited to inject command line arguments on Linux. Version 2.0.5 contains a patch. As a workaround, users of the library can sanitize command strings to remove NUL characters prior to passing them to NuProcess for execution.
CVSS Score: 8.4 (HIGH)
CWE: CWE-77
References: https://github.com/brettwooldridge/NuProcess/commit/29bc09de561bf00ff9bf[PII_REDACTED]3a9709f868; https://github.com/brettwooldridge/NuProcess/pull/143; https://github.com/brettwooldridge/NuProcess/security/advisories/GHSA-cxgf-v2p8-7ph7
CVE: CVE-2022-39245
Published: 2022-09-26
Description: Mist is the command-line interface for the makedeb Package Repository. Prior to version 0.9.5, a user-provided `sudo` binary via the `PATH` variable can allow a local user to run arbitrary commands on the user's system with root permissions. Versions 0.9.5 and later contain a patch. No known workarounds exist.
CVSS Score: 8.4 (HIGH)
CWE: CWE-287, CWE-305, CWE-426
References: https://github.com/makedeb/mist/commit/e257561a32cffe3c541b265097959adaea3d6b67; https://github.com/makedeb/mist/releases/tag/v0.9.5; https://github.com/makedeb/mist/security/advisories/GHSA-pxg4-7c7r-2ww6
CVE: CVE-2022-3204
Published: 2022-09-26
Description: A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for a record that relies on those unresponsive nameservers. The attack can cause a resolver to spend a lot of time/resources resolving records under a malicious delegation point where a considerable number of unresponsive NS records reside. It can trigger high CPU usage in some resolver implementations that continually look in the cache for resolved NS records in that delegation. This can lead to degraded performance and eventually denial of service in orchestrated attacks. Unbound does not suffer from high CPU usage, but resources are still needed for resolving the malicious delegation. Unbound will keep trying to resolve the record until hard limits are reached. Based on the nature of the attack and the replies, different limits could be reached. From version 1.16.3 on, Unbound introduces fixes for better performance when under load, by cutting opportunistic queries for nameserver discovery and DNSKEY prefetching and limiting the number of times a delegation point can issue a cache lookup for missing records.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://lists.debian.org/debian-lts-announce/2023/03/msg00024.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35QGS5FBQTG3DBSK7QV67PA64P24ABHY/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3G2HS6CYPSIGAKO6QLEZPG3RD6AMPB7B/
CVE: CVE-2022-40483
Published: 2022-09-26
Description: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Geoduck-CNN/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-1.md; https://github.com/Geoduck-CNN/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-1.md
CVE: CVE-2022-40484
Published: 2022-09-26
Description: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Geoduck-CNN/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-2.md; https://github.com/Geoduck-CNN/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-2.md
CVE: CVE-2022-40485
Published: 2022-09-26
Description: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Geoduck-CNN/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-3.md; https://github.com/Geoduck-CNN/Bug_report/blob/main/vendors/pushpam02/wedding-planner/SQLi-3.md
CVE: CVE-2022-28721
Published: 2022-09-26
Description: Certain HP Print Products are potentially vulnerable to Remote Code Execution.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hp.com/us-en/document/ish_6[PII_REDACTED]813-16/hpsbpi03810; https://support.hp.com/us-en/document/ish_6[PII_REDACTED]813-16/hpsbpi03810
CVE: CVE-2022-28722
Published: 2022-09-26
Description: Certain HP Print Products are potentially vulnerable to Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://support.hp.com/us-en/document/ish_6[PII_REDACTED]813-16/hpsbpi03810; https://support.hp.com/us-en/document/ish_6[PII_REDACTED]813-16/hpsbpi03810
CVE: CVE-2022-3103
Published: 2022-09-26
Description: off-by-one in io_uring module.
CVSS Score: 7.8 (HIGH)
CWE: CWE-193, CWE-193
References: https://github.com/torvalds/linux/releases/tag/v6.0-rc3; https://github.com/torvalds/linux/releases/tag/v6.0-rc3
CVE: CVE-2022-40785
Published: 2022-09-26
Description: Unsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3.[PII_REDACTED]. This allows an attacker to gain remote code execution on cameras running the firmware when a victim logs into a specially crafted mobile app.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://hackmd.io/%40_zOX-PXQQFmCETA_RZIgow/BkOhIU1oc; https://hackmd.io/%40_zOX-PXQQFmCETA_RZIgow/BkOhIU1oc; https://hackmd.io/@_zOX-PXQQFmCETA_RZIgow/BkOhIU1oc
CVE: CVE-2021-28052
Published: 2022-09-26
Description: A tenant administrator Hitachi Content Platform (HCP) may modify the configuration in another tenant without authorization, potentially allowing unauthorized access to data in the other tenant. Also, a tenant user (non-administrator) may view configuration in another tenant without authorization. This issue affects: Hitachi Vantara Hitachi Content Platform versions prior to 8.3.7; 9.0.0 versions prior to 9.2.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264, CWE-862
References: https://knowledge.hitachivantara.com/Security/HCP_Multitenancy_Vulnerability; https://www.hitachi.com/hirt/hitachi-sec/2021/604.html; https://knowledge.hitachivantara.com/Security/HCP_Multitenancy_Vulnerability
CVE: CVE-2022-2852
Published: 2022-09-26
Description: Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/169457/Chrome-AccountSelectionBubbleView-OnAccountImageFetched-Heap-Use-After-Free.html; https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://crbug.com/1349322
CVE: CVE-2022-2853
Published: 2022-09-26
Description: Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/169459/Chrome-offline_items_collection-OfflineContentAggregator-OnItemRemoved-Heap-Buffer-Overflow.html; https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://crbug.com/1350097
CVE: CVE-2022-2854
Published: 2022-09-26
Description: Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362, CWE-362
References: https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://crbug.com/1337538; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE: CVE-2022-2855
Published: 2022-09-26
Description: Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://crbug.com/1345042; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE: CVE-2022-2856
Published: 2022-09-26
Description: Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://crbug.com/1345630; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE: CVE-2022-2857
Published: 2022-09-26
Description: Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362, CWE-362
References: https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://crbug.com/1338135; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/
CVE: CVE-2022-2858
Published: 2022-09-26
Description: Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html; https://crbug.com/1341918; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/