deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29395
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/6.setWiFiRepeaterConfig; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/6.setWiFiRepeaterConfig
CVE: CVE-2022-29396
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/8.setIpPortFilterRules; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/8.setIpPortFilterRules
CVE: CVE-2022-29397
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/4.setMacFilterRules; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/4.setMacFilterRules
CVE: CVE-2022-29398
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/7.UploadCustomModule; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/7.UploadCustomModule
CVE: CVE-2022-29399
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/9.setUrlFilterRules; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/9.setUrlFilterRules
CVE: CVE-2022-30278
Published: 2022-05-10
Description: A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting attack. The vulnerability is due to improper validation of user-supplied input to MadCap Flare's framework embedded within Black Duck Hub's Help Documentation to supply content. An attacker could exploit this vulnerability by convincing a user to click a link designed to pass malicious input to the interface. A successful exploit could allow the attacker to conduct cross-site scripting attacks and gain access to sensitive browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synopsys.com/blogs/software-security/cyrc-advisory-cross-site-scripting-vulnerability-black-duck-hub/; https://www.synopsys.com/blogs/software-security/cyrc-advisory-cross-site-scripting-vulnerability-black-duck-hub/
CVE: CVE-2021-39738
Published: 2022-05-10
Description: In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-216190509
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/aaos/2022-05-01; https://source.android.com/security/bulletin/aaos/2022-05-01
CVE: CVE-2022-0866
Published: 2022-05-10
Description: This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal. In particular, the org.jboss.as.ejb3.component.EJBComponent class has an incomingRunAsIdentity field. This field is used by the org.jboss.as.ejb3.security.RunAsPrincipalInterceptor to keep track of the current identity prior to switching to a new identity created using the RunAs principal. The exploit consist that the EJBComponent#incomingRunAsIdentity field is currently just a SecurityIdentity. This means in a concurrent environment, where multiple users are repeatedly invoking an EJB that is configured with a RunAs principal, it's possible for the wrong the caller principal to be returned from EJBComponent#getCallerPrincipal. Similarly, it's also possible for EJBComponent#isCallerInRole to return the wrong value. Both of these methods rely on incomingRunAsIdentity. Affects all versions of JBoss EAP from 7.1.0 and all versions of WildFly 11+ when Elytron is enabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=2060929#c0; https://bugzilla.redhat.com/show_bug.cgi?id=2060929#c0
CVE: CVE-2022-1417
Published: 2022-05-10
Description: Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all versions starting from 14.10 before 14.10.1 allows non-project members to access contents of Project Members-only Wikis via malicious CI jobs
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1417.json; https://gitlab.com/gitlab-org/gitlab/-/issues/297282; https://hackerone.com/reports/1075586
CVE: CVE-2022-1431
Published: 2022-05-10
Description: An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint allowing the attacker to cause uncontrolled resource consumption.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1431.json; https://gitlab.com/gitlab-org/gitlab/-/issues/262724; https://hackerone.com/reports/996850
CVE: CVE-2022-20117
Published: 2022-05-10
Description: In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-327
References: https://source.android.com/security/bulletin/pixel/2022-05-01; https://source.android.com/security/bulletin/pixel/2022-05-01
CVE: CVE-2022-20118
Published: 2022-05-10
Description: In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205707793References: N/A
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-05-01; https://source.android.com/security/bulletin/pixel/2022-05-01
CVE: CVE-2022-20119
Published: 2022-05-10
Description: In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213170715References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/pixel/2022-05-01; https://source.android.com/security/bulletin/pixel/2022-05-01
CVE: CVE-2022-20120
Published: 2022-05-10
Description: Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2022-05-01; https://source.android.com/security/bulletin/pixel/2022-05-01
CVE: CVE-2022-20121
Published: 2022-05-10
Description: In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-212573046References: N/A
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2022-05-01; https://source.android.com/security/bulletin/pixel/2022-05-01
CVE: CVE-2022-21972
Published: 2022-05-10
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21972; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21972
CVE: CVE-2022-21978
Published: 2022-05-10
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 8.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21978; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21978
CVE: CVE-2022-22011
Published: 2022-05-10
Description: Windows Graphics Component Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22011; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22011
CVE: CVE-2022-22012
Published: 2022-05-10
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22012; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22012
CVE: CVE-2022-22013
Published: 2022-05-10
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22013; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22013
CVE: CVE-2022-22014
Published: 2022-05-10
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22014; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22014
CVE: CVE-2022-22015
Published: 2022-05-10
Description: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22015; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22015
CVE: CVE-2022-22016
Published: 2022-05-10
Description: Windows PlayToManager Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22016; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22016
CVE: CVE-2022-22017
Published: 2022-05-10
Description: Remote Desktop Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22017; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22017
CVE: CVE-2022-22019
Published: 2022-05-10
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22019; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22019
CVE: CVE-2022-22713
Published: 2022-05-10
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 5.6 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22713; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22713
CVE: CVE-2022-23267
Published: 2022-05-10
Description: .NET and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB/
CVE: CVE-2022-23270
Published: 2022-05-10
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23270; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23270
CVE: CVE-2022-23279
Published: 2022-05-10
Description: Windows ALPC Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23279; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23279
CVE: CVE-2022-24466
Published: 2022-05-10
Description: Windows Hyper-V Security Feature Bypass Vulnerability
CVSS Score: 4.1 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24466; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24466
CVE: CVE-2022-26913
Published: 2022-05-10
Description: Windows Authentication Information Disclosure Vulnerability
CVSS Score: 7.4 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26913; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26913
CVE: CVE-2022-26923
Published: 2022-05-10
Description: Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-295, CWE-295
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26923; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26923; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26923
CVE: CVE-2022-26925
Published: 2022-05-10
Description: Windows LSA Spoofing Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-306, CWE-306
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26925; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26925; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26925
CVE: CVE-2022-26926
Published: 2022-05-10
Description: Windows Address Book Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26926; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26926
CVE: CVE-2022-26927
Published: 2022-05-10
Description: Windows Graphics Component Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26927; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26927
CVE: CVE-2022-26930
Published: 2022-05-10
Description: Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26930; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26930
CVE: CVE-2022-26931
Published: 2022-05-10
Description: Windows Kerberos Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26931; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26931
CVE: CVE-2022-26932
Published: 2022-05-10
Description: Storage Spaces Direct Elevation of Privilege Vulnerability
CVSS Score: 8.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26932; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26932
CVE: CVE-2022-26933
Published: 2022-05-10
Description: Windows NTFS Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26933; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26933
CVE: CVE-2022-26934
Published: 2022-05-10
Description: Windows Graphics Component Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26934; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26934
CVE: CVE-2022-26935
Published: 2022-05-10
Description: Windows WLAN AutoConfig Service Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26935; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26935
CVE: CVE-2022-26936
Published: 2022-05-10
Description: Windows Server Service Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26936; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26936
CVE: CVE-2022-26937
Published: 2022-05-10
Description: Windows Network File System Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26937; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26937
CVE: CVE-2022-26938
Published: 2022-05-10
Description: Storage Spaces Direct Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26938; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26938
CVE: CVE-2022-26939
Published: 2022-05-10
Description: Storage Spaces Direct Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26939; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26939
CVE: CVE-2022-26940
Published: 2022-05-10
Description: Remote Desktop Protocol Client Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26940; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26940
CVE: CVE-2022-28601
Published: 2022-05-10
Description: A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://github.com/FlaviuPopescu/CVE-2022-28601; https://www.lmsdoctor.com/simple-2-factor-authentication-plugin-for-moodle; https://github.com/FlaviuPopescu/CVE-2022-28601
CVE: CVE-2022-29102
Published: 2022-05-10
Description: Windows Failover Cluster Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29102; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29102
CVE: CVE-2022-29103
Published: 2022-05-10
Description: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29103; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29103
CVE: CVE-2022-29104
Published: 2022-05-10
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29104; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29104
CVE: CVE-2022-29105
Published: 2022-05-10
Description: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29105; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29105
CVE: CVE-2022-29106
Published: 2022-05-10
Description: Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29106; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29106
CVE: CVE-2022-29107
Published: 2022-05-10
Description: Microsoft Office Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29107; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29107
CVE: CVE-2022-29108
Published: 2022-05-10
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29108; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29108
CVE: CVE-2022-29109
Published: 2022-05-10
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29109; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29109
CVE: CVE-2022-29110
Published: 2022-05-10
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29110; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29110
CVE: CVE-2022-29112
Published: 2022-05-10
Description: Windows Graphics Component Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29112; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29112
CVE: CVE-2022-29113
Published: 2022-05-10
Description: Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29113; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29113
CVE: CVE-2022-29114
Published: 2022-05-10
Description: Windows Print Spooler Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29114; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29114
CVE: CVE-2022-29115
Published: 2022-05-10
Description: Windows Fax Service Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29115; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29115
CVE: CVE-2022-29116
Published: 2022-05-10
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29116; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29116
CVE: CVE-2022-29117
Published: 2022-05-10
Description: .NET and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29117; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB/
CVE: CVE-2022-29120
Published: 2022-05-10
Description: Windows Clustered Shared Volume Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29120; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29120
CVE: CVE-2022-29121
Published: 2022-05-10
Description: Windows WLAN AutoConfig Service Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29121; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29121