deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-20144
Published: 2022-07-24
Description: A vulnerability has been found in Anvsoft PDFMate PDF Converter Pro 1.7.5.0 and classified as critical. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-119
References: https://vuldb.com/?id.97267; https://www.vulnerability-lab.com/get_content.php?id=2029; https://vuldb.com/?id.97267
CVE: CVE-2017-20145
Published: 2022-07-25
Description: A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://seclists.org/fulldisclosure/2017/Feb/19; https://vuldb.com/?id.96818; http://seclists.org/fulldisclosure/2017/Feb/19
CVE: CVE-2022-36444
Published: 2022-07-25
Description: An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker (with network access to the admin interface) to disrupt system availability or potentially compromise the confidentiality and integrity of the system.
CVSS Score: 8.6 (HIGH)
References: https://networks.unify.com/security/advisories/OBSO-2203-01.pdf; https://networks.unify.com/security/advisories/OBSO-2203-01.pdf
CVE: CVE-2022-36446
Published: 2022-07-25
Description: software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: http://packetstormsecurity.com/files/167894/Webmin-1.996-Remote-Code-Execution.html; http://packetstormsecurity.com/files/168049/Webmin-Package-Updates-Command-Injection.html; https://gist.github.com/emirpolatt/cf19d6c0128fa3e25ebb47e09243919b
CVE: CVE-2022-36450
Published: 2022-07-25
Description: Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checking the URL.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20
References: https://forum.obsidian.md/t/possible-remote-code-execution-through-obsidian-uri-scheme/39743; https://www.chtsecurity.com/news/f2a1ad21-3442-495f-8b6e-f0fe433d6caa; https://forum.obsidian.md/t/possible-remote-code-execution-through-obsidian-uri-scheme/39743
CVE: CVE-2022-29709
Published: 2022-07-25
Description: CommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection vulnerabilities via the username and password parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://clink.com; http://communilink.com; https://packetstormsecurity.com/files/167240/CLink-Office-2.0-SQL-Injection.html
CVE: CVE-2022-0594
Published: 2022-07-25
Description: The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/4de9451e-2c8d-4d99-a255-b027466d29b1; https://wpscan.com/vulnerability/4de9451e-2c8d-4d99-a255-b027466d29b1
CVE: CVE-2022-0899
Published: 2022-07-25
Description: The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1772417a-1abb-4d97-9[PII_REDACTED]defd1; https://wpscan.com/vulnerability/1772417a-1abb-4d97-9[PII_REDACTED]defd1
CVE: CVE-2022-1539
Published: 2022-07-25
Description: The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://wpscan.com/vulnerability/50f70927-9677-4ba4-a388-0a41ed356523; https://wpscan.com/vulnerability/50f70927-9677-4ba4-a388-0a41ed356523
CVE: CVE-2022-1551
Published: 2022-07-25
Description: The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-425
References: https://wpscan.com/vulnerability/51b4752a-7922-444d-a022-f1c7159b5d84; https://wpscan.com/vulnerability/51b4752a-7922-444d-a022-f1c7159b5d84
CVE: CVE-2022-2071
Published: 2022-07-25
Description: The Name Directory WordPress plugin before 1.25.4 does not have CSRF check when importing names, and is also lacking sanitisation as well as escaping in some of the imported data, which could allow attackers to make a logged in admin import arbitrary names with XSS payloads in them.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/d3653976-9e0a-4f2b-87f7-26b5e7a74b9d; https://wpscan.com/vulnerability/d3653976-9e0a-4f2b-87f7-26b5e7a74b9d
CVE: CVE-2022-2072
Published: 2022-07-25
Description: The Name Directory WordPress plugin before 1.25.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. Furthermore, as the payload is also saved into the database after the request, it leads to a Stored XSS as well
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/3014540c-21b3-481c-83a1-ce3017151af4; https://wpscan.com/vulnerability/3014540c-21b3-481c-83a1-ce3017151af4
CVE: CVE-2022-2115
Published: 2022-07-25
Description: The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1f0ae535-c560-4510-ae9a-059e2435ad39; https://wpscan.com/vulnerability/1f0ae535-c560-4510-ae9a-059e2435ad39
CVE: CVE-2022-2189
Published: 2022-07-25
Description: The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b6ed4d64-ee98-41bd-a97a-8350c2a8a546; https://wpscan.com/vulnerability/b6ed4d64-ee98-41bd-a97a-8350c2a8a546
CVE: CVE-2022-2219
Published: 2022-07-25
Description: The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1240797c-7f45-4c36-83f0-501c544ce76a; https://wpscan.com/vulnerability/1240797c-7f45-4c36-83f0-501c544ce76a
CVE: CVE-2022-2239
Published: 2022-07-25
Description: The Request a Quote WordPress plugin before 2.3.9 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/42127d96-547f-46cb-95d0-a19a8fe7580e; https://wpscan.com/vulnerability/42127d96-547f-46cb-95d0-a19a8fe7580e
CVE: CVE-2022-2240
Published: 2022-07-25
Description: The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could lead to a CSV injection once an admin download and open it
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://wpscan.com/vulnerability/6a3a573e-f9f2-45ec-9156-332cc551fc7e; https://wpscan.com/vulnerability/6a3a573e-f9f2-45ec-9156-332cc551fc7e
CVE: CVE-2022-2299
Published: 2022-07-25
Description: The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/29015c35-0470-41b8-b197-c71b800ae2a9; https://wpscan.com/vulnerability/29015c35-0470-41b8-b197-c71b800ae2a9
CVE: CVE-2022-2340
Published: 2022-07-25
Description: The W-DALIL WordPress plugin through 2.0 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/167595/; https://wpscan.com/vulnerability/306ea895-0b90-4276-bb97-eecb34f9bfae; https://packetstormsecurity.com/files/167595/
CVE: CVE-2022-2341
Published: 2022-07-25
Description: The Simple Page Transition WordPress plugin through 1.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/167597/; https://wpscan.com/vulnerability/4a98a024-1f84-482f-9dc9-4714ac42c094; https://packetstormsecurity.com/files/167597/
CVE: CVE-2020-28422
Published: 2022-07-25
Description: All versions of package git-archive are vulnerable to Command Injection via the exports function.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-77
References: https://security.snyk.io/vuln/SNYK-JS-GITARCHIVE-1050391; https://security.snyk.io/vuln/SNYK-JS-GITARCHIVE-1050391
CVE: CVE-2020-28435
Published: 2022-07-25
Description: This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-77
References: https://security.snyk.io/vuln/SNYK-JS-FFMPEGSDK-1050429; https://security.snyk.io/vuln/SNYK-JS-FFMPEGSDK-1050429
CVE: CVE-2020-28436
Published: 2022-07-25
Description: This affects all versions of package google-cloudstorage-commands.
CVSS Score: 7.3 (HIGH)
CWE: CWE-77
References: https://github.com/samradical/google-cloudstorage-commands/blob/master/index.js%23L11; https://security.snyk.io/vuln/SNYK-JS-GOOGLECLOUDSTORAGECOMMANDS-1050431; https://github.com/samradical/google-cloudstorage-commands/blob/master/index.js%23L11
CVE: CVE-2020-28438
Published: 2022-07-25
Description: This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://security.snyk.io/vuln/SNYK-JS-DEFERREDEXEC-1050433; https://security.snyk.io/vuln/SNYK-JS-DEFERREDEXEC-1050433
CVE: CVE-2020-28441
Published: 2022-07-25
Description: This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be exploited further depending on the context.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/loge5/conf-cfg-ini/commit/3a88a6c52c31eb6c0f033369eed40aa168a636ea; https://security.snyk.io/vuln/SNYK-JS-CONFCFGINI-1048973; https://github.com/loge5/conf-cfg-ini/commit/3a88a6c52c31eb6c0f033369eed40aa168a636ea
CVE: CVE-2020-28443
Published: 2022-07-25
Description: This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://security.snyk.io/vuln/SNYK-JS-SONARWRAPPER-1050980; https://security.snyk.io/vuln/SNYK-JS-SONARWRAPPER-1050980
CVE: CVE-2020-28445
Published: 2022-07-25
Description: This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.snyk.io/vuln/SNYK-JS-NPMHELP-1050983; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-28446
Published: 2022-07-25
Description: The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/taoyuan/ntesseract/commit/fcbc36f381798b4362179c0cdf9961b437c7b619; https://security.snyk.io/vuln/SNYK-JS-NTESSERACT-1050982; https://github.com/taoyuan/ntesseract/commit/fcbc36f381798b4362179c0cdf9961b437c7b619
CVE: CVE-2020-28447
Published: 2022-07-25
Description: This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://security.snyk.io/vuln/SNYK-JS-XOPEN-1050981; https://security.snyk.io/vuln/SNYK-JS-XOPEN-1050981
CVE: CVE-2020-28455
Published: 2022-07-25
Description: This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are not escaped.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://security.snyk.io/vuln/SNYK-JS-MARKDOWNITTOC-1044067; https://security.snyk.io/vuln/SNYK-JS-MARKDOWNITTOC-1044067
CVE: CVE-2020-28459
Published: 2022-07-25
Description: This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://security.snyk.io/vuln/SNYK-JS-MARKDOWNITDECORATE-1044068; https://security.snyk.io/vuln/SNYK-JS-MARKDOWNITDECORATE-1044068
CVE: CVE-2020-28461
Published: 2022-07-25
Description: This affects the package js-ini before 1.3.0. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/Sdju/js-ini/commit/fa17efb7e3a7c9464508a254838d4c231784931e; https://security.snyk.io/vuln/SNYK-JS-JSINI-1048970; https://github.com/Sdju/js-ini/commit/fa17efb7e3a7c9464508a254838d4c231784931e
CVE: CVE-2020-28462
Published: 2022-07-25
Description: This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be exploited further depending on the context.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://security.snyk.io/vuln/SNYK-JS-IONPARSER-1048971; https://security.snyk.io/vuln/SNYK-JS-IONPARSER-1048971
CVE: CVE-2020-28471
Published: 2022-07-25
Description: This affects the package properties-reader before 2.2.0.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/steveukx/properties/commit/0877cc871db9865f58dd9389ce99e61be05380a5; https://github.com/steveukx/properties/issues/40; https://security.snyk.io/vuln/SNYK-JS-PROPERTIESREADER-1048968
CVE: CVE-2020-7649
Published: 2022-07-25
Description: This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/snyk/broker/commit/90e0bac07a800b7c4c6646097c9c89d6b878b429; https://security.snyk.io/vuln/SNYK-JS-SNYKBROKER-570608; https://updates.snyk.io/snyk-broker-security-fixes-152338
CVE: CVE-2020-7677
Published: 2022-07-25
Description: This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization.
CVSS Score: 8.6 (HIGH)
References: https://github.com/thenables/thenify/blob/master/index.js%23L17; https://github.com/thenables/thenify/commit/0d94a24eb933bc835d568f3009f4d269c4c4c17a; https://lists.debian.org/debian-lts-announce/2022/09/msg00039.html
CVE: CVE-2020-7678
Published: 2022-07-25
Description: This affects all versions of package node-import. The "params" argument of module function can be controlled by users without any sanitization.b. This is then provided to the “eval” function located in line 79 in the index file "index.js".
CVSS Score: 8.6 (HIGH)
References: https://github.com/mahdaen/node-import/blob/master/index.js%23L79; https://security.snyk.io/vuln/SNYK-JS-NODEIMPORT-571691; https://github.com/mahdaen/node-import/blob/master/index.js%23L79
CVE: CVE-2021-23373
Published: 2022-07-25
Description: All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://security.snyk.io/vuln/SNYK-JS-SETDEEPPROP-1083231; https://security.snyk.io/vuln/SNYK-JS-SETDEEPPROP-1083231
CVE: CVE-2021-23397
Published: 2022-07-25
Description: All versions of package @ianwalter/merge are vulnerable to Prototype Pollution via the main (merge) function. Maintainer suggests using @generates/merger instead.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-1321
References: https://security.snyk.io/vuln/SNYK-JS-IANWALTERMERGE-1311022; https://security.snyk.io/vuln/SNYK-JS-IANWALTERMERGE-1311022
CVE: CVE-2021-23451
Published: 2022-07-25
Description: The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-330
References: https://github.com/Maheshkumar-Kakade/otp-generator/commit/b27de1ce439ae7f533cec26677e[PII_REDACTED]b70; https://github.com/Maheshkumar-Kakade/otp-generator/issues/12; https://security.snyk.io/vuln/SNYK-JS-OTPGENERATOR-1655480
CVE: CVE-2022-0670
Published: 2022-07-25
Description: A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5O3XMDFZWA2FWU6GAYOVSFJPOUTXN42N/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TIRTTRG5O4YP2TNGDCDOHIHP2DM3DFBT/
CVE: CVE-2022-1232
Published: 2022-07-25
Description: Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop.html; https://crbug.com/1311641; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1305
Published: 2022-07-25
Description: Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1285234; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1306
Published: 2022-07-25
Description: Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-290
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1299287; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1307
Published: 2022-07-25
Description: Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-290
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1301873; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1308
Published: 2022-07-25
Description: Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1283050; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1309
Published: 2022-07-25
Description: Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-863
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1106456; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1310
Published: 2022-07-25
Description: Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1307610; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1311
Published: 2022-07-25
Description: Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1310717; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1312
Published: 2022-07-25
Description: Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1311701; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1313
Published: 2022-07-25
Description: Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1270539; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-1314
Published: 2022-07-25
Description: Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html; https://crbug.com/1304658; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1314
CVE: CVE-2022-21802
Published: 2022-07-25
Description: The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/artf/grapesjs/commit/13e85d152d486b968265c4b8017e8901e7d89ff3; https://github.com/artf/grapesjs/issues/4411%23issuecomment[PII_REDACTED]; https://github.com/artf/grapesjs/releases/tag/v0.19.5