deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29200
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LSTMBlockCell` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code does not validate the ranks of any of the arguments to this API call. This results in `CHECK`-failures when the elements of the tensor are accessed. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-1284
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/rnn/lstm_ops.cc; https://github.com/tensorflow/tensorflow/commit/803404044ae7a1efac48ba82d74111fce1ddb09a; https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
CVE: CVE-2022-29207
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, multiple TensorFlow operations misbehave in eager mode when the resource handle provided to them is invalid. In graph mode, it would have been impossible to perform these API calls, but migration to TF 2.x eager mode opened up this vulnerability. If the resource handle is empty, then a reference is bound to a null pointer inside TensorFlow codebase (various codepaths). This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-475
References: https://github.com/tensorflow/tensorflow/commit/a5b89cd68c02329d793356bda85d079e9e69b4e7; https://github.com/tensorflow/tensorflow/commit/dbdd98c37bc25249e8f288bd30d01e118a7b4498; https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
CVE: CVE-2022-1775
Published: 2022-05-20
Description: Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521, CWE-521
References: https://github.com/polonel/trudesk/commit/13dd6c61fc85fa773b4065f075fceda563129c53; https://huntr.dev/bounties/0966043c-602f-463e-a6e5-9a1745f4fbfa; https://github.com/polonel/trudesk/commit/13dd6c61fc85fa773b4065f075fceda563129c53
CVE: CVE-2022-29201
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizedConv2D` does not fully validate the input arguments. In this case, references get bound to `nullptr` for each argument that is empty. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-476
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/quantized_conv_ops.cc; https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4; https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
CVE: CVE-2022-29202
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.ragged.constant` does not fully validate the input arguments. This results in a denial of service by consuming all available memory. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-400, CWE-1284
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/ops/ragged/ragged_factory_ops.py#L146-L239; https://github.com/tensorflow/tensorflow/commit/bd4d5583ff9c8df26d47a23e[PII_REDACTED]97310e; https://github.com/tensorflow/tensorflow/issues/55199
CVE: CVE-2022-29203
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SpaceToBatchND` (in all backends such as XLA and handwritten kernels) is vulnerable to an integer overflow: The result of this integer overflow is used to allocate the output tensor, hence we get a denial of service via a `CHECK`-failure (assertion failure), as in TFSA-2021-198. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md; https://github.com/tensorflow/tensorflow/commit/acd56b8bcb72b163c834ae4f18469047b001fadf; https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
CVE: CVE-2022-29204
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.UnsortedSegmentJoin` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code assumes `num_segments` is a positive scalar but there is no validation. Since this value is used to allocate the output tensor, a negative value would result in a `CHECK`-failure (assertion failure), as per TFSA-2021-198. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-191, CWE-20
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/unsorted_segment_join_op.cc#L83-L14; https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md; https://github.com/tensorflow/tensorflow/commit/20cb18724b0bf6c09071a3f53434c4eec53cc147
CVE: CVE-2022-29205
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.*` ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a `nullptr` value is passed to `ParseDimensionValue` for the `py_value` argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-908
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/eager/pywrap_tfe_src.cc#L296-L320; https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/eager/pywrap_tfe_src.cc#L480-L482; https://github.com/tensorflow/tensorflow/commit/237822b59fc504dda2c564787f5d3ad9c4aa62d9
CVE: CVE-2022-29206
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorDenseAdd` does not fully validate the input arguments. In this case, a reference gets bound to a `nullptr` during kernel execution. This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-476
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/sparse_tensor_dense_add_op.cc; https://github.com/tensorflow/tensorflow/commit/11ced8467eccad9c7cb94867708be8fa5c66c730; https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
CVE: CVE-2022-29208
Published: 2022-05-20
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.EditDistance` has incomplete validation. Users can pass negative values to cause a segmentation fault based denial of service. In multiple places throughout the code, one may compute an index for a write operation. However, the existing validation only checks against the upper bound of the array. Hence, it is possible to write before the array by massaging the input to generate negative values for `loc`. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://github.com/tensorflow/tensorflow/commit/30721cf564cb029d34535446d6a5a6357bebc8e7; https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4; https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
CVE: CVE-2022-31258
Published: 2022-05-20
Description: In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.
CVSS Score: 8.2 (HIGH)
CWE: CWE-59
References: https://checkmk.com/werk/13902; https://forum.checkmk.com/c/announcements/18; https://checkmk.com/werk/13902
CVE: CVE-2022-29188
Published: 2022-05-21
Description: Smokescreen is an HTTP proxy. The primary use case for Smokescreen is to prevent server-side request forgery (SSRF) attacks in which external attackers leverage the behavior of applications to connect to or scan internal infrastructure. Smokescreen also offers an option to deny access to additional (e.g., external) URLs by way of a deny list. There was an issue in Smokescreen that made it possible to bypass the deny list feature by surrounding the hostname with square brackets (e.g. `[example.com]`). This only impacted the HTTP proxy functionality of Smokescreen. HTTPS requests were not impacted. Smokescreen version 0.0.4 contains a patch for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/stripe/smokescreen/commit/dea7b3c89df000f4072ff9866d61d78e30df6a36; https://github.com/stripe/smokescreen/security/advisories/GHSA-qwrf-gfpj-qvj6; https://github.com/stripe/smokescreen/commit/dea7b3c89df000f4072ff9866d61d78e30df6a36
CVE: CVE-2022-29189
Published: 2022-05-21
Description: Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could exploit this to cause excessive memory usage. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://github.com/pion/dtls/commit/a6397ff7282bc56dc37a68ea9211702edb4de1de; https://github.com/pion/dtls/releases/tag/v2.1.4; https://github.com/pion/dtls/security/advisories/GHSA-cx94-mrg9-rq4j
CVE: CVE-2022-29190
Published: 2022-05-21
Description: Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infinite loop when processing. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/pion/dtls/commit/e0b2ce3592e8e7d73713ac67b363a2e192a4cecf; https://github.com/pion/dtls/releases/tag/v2.1.4; https://github.com/pion/dtls/security/advisories/GHSA-cm8f-h6j3-p25c
CVE: CVE-2022-29209
Published: 2022-05-21
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros that TensorFlow uses for writing assertions (e.g., `CHECK_LT`, `CHECK_GT`, etc.) have an incorrect logic when comparing `size_t` and `int` values. Due to type conversion rules, several of the macros would trigger incorrectly. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-843
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/platform/default/logging.h; https://github.com/tensorflow/tensorflow/commit/b917181c29b50cb83399ba41f4d938dc369109a1; https://github.com/tensorflow/tensorflow/issues/55530
CVE: CVE-2022-29210
Published: 2022-05-21
Description: TensorFlow is an open source platform for machine learning. In version 2.8.0, the `TensorKey` hash function used total estimated `AllocatedBytes()`, which (a) is an estimate per tensor, and (b) is a very poor hash function for constants (e.g. `int32_t`). It also tried to access individual tensor bytes through `tensor.data()` of size `AllocatedBytes()`. This led to ASAN failures because the `AllocatedBytes()` is an estimate of total bytes allocated by a tensor, including any pointed-to constructs (e.g. strings), and does not refer to contiguous bytes in the `.data()` buffer. The discoverers could not use this byte vector anyway because types such as `tstring` include pointers, whereas they needed to hash the string values themselves. This issue is patched in Tensorflow versions 2.9.0 and 2.8.1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-122, CWE-787
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/framework/tensor_key.h#L53-L64; https://github.com/tensorflow/tensorflow/commit/1b85a28d395dc91f4d22b5f9e1e9a22e92ccecd6; https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
CVE: CVE-2022-29211
Published: 2022-05-21
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.histogram_fixed_width` is vulnerable to a crash when the values array contain `Not a Number` (`NaN`) elements. The implementation assumes that all floating point operations are defined and then converts a floating point result to an integer index. If `values` contains `NaN` then the result of the division is still `NaN` and the cast to `int32` would result in a crash. This only occurs on the CPU implementation. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/histogram_op.cc; https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/histogram_op.cc#L35-L74; https://github.com/tensorflow/tensorflow/commit/e57fd691c7b0fd00ea3bfe43444f30c1969748b5
CVE: CVE-2022-29212
Published: 2022-05-21
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, certain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could be greater than 1 but code was always assuming sub-unit scaling. Thus, since code was calling `QuantizeMultiplierSmallerThanOneExp`, the `TFLITE_CHECK_LT` assertion would trigger and abort the process. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/lite/kernels/internal/quantization_util.cc#L114-L123; https://github.com/tensorflow/tensorflow/commit/a989426ee1346693cc015792f11d715f6944f2b8; https://github.com/tensorflow/tensorflow/issues/43661
CVE: CVE-2022-29213
Published: 2022-05-21
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the `tf.compat.v1.signal.rfft2d` and `tf.compat.v1.signal.rfft3d` lack input validation and under certain condition can result in crashes (due to `CHECK`-failures). Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-617
References: https://github.com/tensorflow/tensorflow/commit/0a8a781e597b18ead006d19b7d23d0a369e9ad73; https://github.com/tensorflow/tensorflow/issues/55263; https://github.com/tensorflow/tensorflow/pull/55274
CVE: CVE-2022-29214
Published: 2022-05-21
Description: NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. Prior to versions 3.29.3 and 4.3.3, an open redirect vulnerability is present when the developer is implementing an OAuth 1 provider. Versions 3.29.3 and 4.3.3 contain a patch for this issue. The maintainers recommend adding a certain configuration to one's `callbacks` option as a workaround for those unable to upgrade.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/nextauthjs/next-auth/releases/tag/next-auth%40v4.3.3; https://github.com/nextauthjs/next-auth/security/advisories/GHSA-q2mx-j4x2-2h74; https://github.com/nextauthjs/next-auth/releases/tag/next-auth%40v4.3.3
CVE: CVE-2022-29215
Published: 2022-05-21
Description: RegionProtect is a plugin that allows users to manage certain events in certain regions of the world. Versions prior to 1.1.0 contain a YAML injection vulnerability that can cause an instant server crash if the passed arguments are not matched. Version 1.1.0 contains a patch for this issue. As a workaround, restrict operator permissions to untrusted people and avoid entering arguments likely to cause a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88, CWE-88
References: https://github.com/kaidomc-pm-pl/RegionProtect/commit/0060d421358ab59acb6a168eab0d11c43d2d105d; https://github.com/kaidomc-pm-pl/RegionProtect/security/advisories/GHSA-7gr2-w2r3-r9vf; https://github.com/kaidomc-pm-pl/RegionProtect/commit/0060d421358ab59acb6a168eab0d11c43d2d105d
CVE: CVE-2022-29216
Published: 2022-05-21
Description: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, TensorFlow's `saved_model_cli` tool is vulnerable to a code injection. This can be used to open a reverse shell. This code path was maintained for compatibility reasons as the maintainers had several test cases where numpy expressions were used as arguments. However, given that the tool is always run manually, the impact of this is still not severe. The maintainers have now removed the `safe=False` argument, so all parsing is done without calling `eval`. The patch is available in versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/tools/saved_model_cli.py#L566-L574; https://github.com/tensorflow/tensorflow/commit/8b202f08d52e8206af2bdb2112a62fafbc546ec7; https://github.com/tensorflow/tensorflow/commit/c5da7af048611aa29e9382371f0aed5018516cac
CVE: CVE-2022-29222
Published: 2022-05-21
Description: Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.5, a DTLS Client could provide a Certificate that it doesn't posses the private key for and Pion DTLS wouldn't reject it. This issue affects users that are using Client certificates only. The connection itself is still secure. The Certificate provided by clients can't be trusted when using a Pion DTLS server prior to version 2.1.5. Users should upgrade to version 2.1.5 to receive a patch. There are currently no known workarounds.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://github.com/pion/dtls/commit/d2f797183a9f044ce976e6df6f362662ca722412; https://github.com/pion/dtls/releases/tag/v2.1.5; https://github.com/pion/dtls/security/advisories/GHSA-w45j-f832-hxvh
CVE: CVE-2022-1752
Published: 2022-05-21
Description: Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/polonel/trudesk/commit/d107f12e71c0fe1e7ac0fdc7463f59c4965a42cd; https://huntr.dev/bounties/66e9bfa9-598f-49ab-a472-752911df3f2d; https://github.com/polonel/trudesk/commit/d107f12e71c0fe1e7ac0fdc7463f59c4965a42cd
CVE: CVE-2022-31259
Published: 2022-05-21
Description: The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control. When a /p1/p2/:name route is configured, attackers can access it by appending .xml in various places (e.g., p1.xml instead of p1).
CVSS Score: 9.8 (CRITICAL)
References: https://beego.vip; https://github.com/advisories/GHSA-qx32-f6g6-fcfr; https://github.com/beego/beego/issues/4946
CVE: CVE-2022-31264
Published: 2022-05-21
Description: Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/Ainevsia/CVE-Request/tree/main/Solana/1; https://github.com/solana-labs/rbpf/releases/tag/v0.2.29; https://github.com/Ainevsia/CVE-Request/tree/main/Solana/1
CVE: CVE-2022-31267
Published: 2022-05-21
Description: Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext 'attacker@example.com\n\trole = "#admin"' value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/gitblit/gitblit/issues/1410; https://github.com/gitblit/gitblit/releases/tag/v1.9.3; https://github.com/gitblit/gitblit/issues/1410
CVE: CVE-2022-31268
Published: 2022-05-21
Description: A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/metaStor/Vuls/blob/main/gitblit/gitblit%20V1.9.3%20path%20traversal/gitblit%20V1.9.3%20path%20traversal.md; https://github.com/metaStor/Vuls/blob/main/gitblit/gitblit%20V1.9.3%20path%20traversal/gitblit%20V1.9.3%20path%20traversal.md
CVE: CVE-2022-1809
Published: 2022-05-21
Description: Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824, CWE-824
References: https://github.com/radareorg/radare2/commit/919e3ac1a13f753c73e7a8e8d8bb4a143218732d; https://huntr.dev/bounties/0730a95e-c485-4ff2-9a5d-bb3abfda0b17; https://github.com/radareorg/radare2/commit/919e3ac1a13f753c73e7a8e8d8bb4a143218732d
CVE: CVE-2022-1813
Published: 2022-05-22
Description: OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/yogeshojha/rengine/commit/8277cec0f008a0451371a92e7e0bf082ab3f0c34; https://huntr.dev/bounties/b255cf59-9ecd-4255-b9a2-b40b5ec6c572; https://github.com/yogeshojha/rengine/commit/8277cec0f008a0451371a92e7e0bf082ab3f0c34
CVE: CVE-2021-41834
Published: 2022-05-23
Description: JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality can be used by a low-privileged user to read and copy any artifact that exists in the Artifactory deployment due to improper permissions validation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://www.jfrog.com/confluence/display/JFROG/CVE-2021-41834%3A+Artifactory+Broken+Access+Control+on+Copy+Artifact; https://www.jfrog.com/confluence/display/JFROG/CVE-2021-41834%3A+Artifactory+Broken+Access+Control+on+Copy+Artifact
CVE: CVE-2022-0346
Published: 2022-05-23
Description: The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allow_url_include is turned on.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4b339390-d71a-44e0-8682-51a12bd2bfe6; https://wpscan.com/vulnerability/4b339390-d71a-44e0-8682-51a12bd2bfe6
CVE: CVE-2022-0781
Published: 2022-05-23
Description: The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action (available to unauthenticated users), leading to an SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/1a8f9c7b-a422-4f45-a516-c3c14eb05161; https://wpscan.com/vulnerability/1a8f9c7b-a422-4f45-a516-c3c14eb05161