deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-25244
Published: 2022-03-10
Description: Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to authorized operators with `read` permissions on this endpoint. Fixed in Vault Enterprise 1.9.4, 1.8.9 and 1.7.10.
CVSS Score: 6.5 (MEDIUM)
References: https://discuss.hashicorp.com; https://discuss.hashicorp.com/t/hcsec-2022-08-vault-enterprise-s-tokenization-transform-configuration-endpoint-may-expose-transform-key/36599; https://discuss.hashicorp.com
CVE: CVE-2022-25294
Published: 2022-03-10
Description: Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Windows user to run arbitrary code with SYSTEM privileges. All versions prior to 7.12.1 are affected. Agents for MacOS and Linux and Cloud are unaffected. Proofpoint has released fixed software version 7.12.1. The fixed software versions are available through the customer support portal.
CVSS Score: 7.8 (HIGH)
References: https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2022-0001; https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2022-0001
CVE: CVE-2022-25325
Published: 2022-03-10
Description: Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25230.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://jvn.jp/en/vu/JVNVU90121984/index.html; https://jvn.jp/en/vu/JVNVU90121984/index.html
CVE: CVE-2022-25368
Published: 2022-03-10
Description: Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.
CVSS Score: 4.7 (MEDIUM)
References: https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960; https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb
CVE: CVE-2022-25546
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsUser parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/6; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/6
CVE: CVE-2022-25547
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/1; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/1
CVE: CVE-2022-25548
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the serverName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/5; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/5
CVE: CVE-2022-25549
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsEn parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/4; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/4
CVE: CVE-2022-25550
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/9; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/9
CVE: CVE-2022-25551
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsDomain parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/8; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/8
CVE: CVE-2022-25552
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/3; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/3
CVE: CVE-2022-25553
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsPwd parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/7; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/7
CVE: CVE-2022-25554
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceId parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/10; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/10
CVE: CVE-2022-25555
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ntpServer parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/2; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/2
CVE: CVE-2022-25556
Published: 2022-03-10
Description: Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX12/6; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX12/6
CVE: CVE-2022-25557
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the urls parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/11; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/11
CVE: CVE-2022-25558
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ProvinceCode parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/13; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/13
CVE: CVE-2022-25560
Published: 2022-03-10
Description: Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX12/4; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX12/4
CVE: CVE-2022-25561
Published: 2022-03-10
Description: Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00. This vulnerability allows attackers to cause a Denial of Service (DoS) via the list parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX12/5; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX12/5
CVE: CVE-2022-25566
Published: 2022-03-10
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/12; https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/12
CVE: CVE-2022-25814
Published: 2022-03-10
Description: PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25815
Published: 2022-03-10
Description: PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25816
Published: 2022-03-10
Description: Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25817
Published: 2022-03-10
Description: Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25818
Published: 2022-03-10
Description: Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-119
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25819
Published: 2022-03-10
Description: OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25820
Published: 2022-03-10
Description: A vulnerable design in fingerprint matching algorithm prior to SMR Mar-2022 Release 1 allows physical attackers to perform brute force attack on screen lock password.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-307, CWE-307
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25821
Published: 2022-03-10
Description: Improper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB read.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25822
Published: 2022-03-10
Description: An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=3
CVE: CVE-2022-25823
Published: 2022-03-10
Description: Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log.
CVSS Score: 1.9 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3
CVE: CVE-2022-25824
Published: 2022-03-10
Description: Improper access control vulnerability in BixbyTouch prior to version 2.2.00.6 in China models allows untrusted applications to load arbitrary URL and local files in webview.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3
CVE: CVE-2022-25825
Published: 2022-03-10
Description: Improper access control vulnerability in Samsung Account prior to version 13.1.0.1 allows attackers to access to the authcode for sign-in.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3
CVE: CVE-2022-25826
Published: 2022-03-10
Description: Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log
CVSS Score: 1.9 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3
CVE: CVE-2022-25827
Published: 2022-03-10
Description: Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log
CVSS Score: 1.9 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3
CVE: CVE-2022-25828
Published: 2022-03-10
Description: Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log
CVSS Score: 1.9 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3
CVE: CVE-2022-25829
Published: 2022-03-10
Description: Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log
CVSS Score: 1.9 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3
CVE: CVE-2022-25830
Published: 2022-03-10
Description: Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connected WiFiAp in the log
CVSS Score: 1.9 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3
CVE: CVE-2022-25922
Published: 2022-03-10
Description: Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01
CVE: CVE-2022-26100
Published: 2022-03-10
Description: SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may obtain privileged access to the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129, CWE-20
References: https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10; https://launchpad.support.sap.com/#/notes/3111110; https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
CVE: CVE-2022-26101
Published: 2022-03-10
Description: Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/167561/SAP-Fiori-Launchpad-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2022/Jun/39; https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
CVE: CVE-2022-26102
Published: 2022-03-10
Description: Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transaction that is available with in the same SAP system even if he/she isn't authorized for that transaction. A successful exploitation could expose information and in worst case manipulate data before the start screen is executed, resulting in limited impact on confidentiality and integrity of the application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10; https://launchpad.support.sap.com/#/notes/3145997; https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
CVE: CVE-2022-26103
Published: 2022-03-10
Description: Under certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an attacker to access information which could lead to information gathering for further exploits and attacks.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10; https://launchpad.support.sap.com/#/notes/3132360; https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
CVE: CVE-2022-26104
Published: 2022-03-10
Description: SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10; https://launchpad.support.sap.com/#/notes/3144941; https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
CVE: CVE-2022-26131
Published: 2022-03-10
Description: Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-1319
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-063-01
CVE: CVE-2022-26143
Published: 2022-03-10
Description: The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic). This was exploited in the wild in February and March 2022 for the TP240PhoneHome DDoS attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://arstechnica.com/information-technology/2022/03/ddosers-use-new-method-capable-of-amplifying-traffic-by-a-factor-of-4-billion/; https://blog.cloudflare.com/cve-2022-26143/; https://news.ycombinator.com/item?id=30614073
CVE: CVE-2022-26311
Published: 2022-03-10
Description: Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.
CVSS Score: 7.5 (HIGH)
References: https://docs.couchbase.com/operator/current/overview.html; https://www.couchbase.com/alerts; https://docs.couchbase.com/operator/current/overview.html
CVE: CVE-2022-26333
Published: 2022-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2022-26355
Published: 2022-03-10
Description: Citrix Federated Authentication Service (FAS) 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module (TPM) to incorrectly store that key in the Microsoft Software Key Storage Provider (MSKSP). This issue only occurs if PowerShell was used when configuring FAS to store the registration authority certificate’s private key in the TPM. It does not occur if the TPM was not selected for use or if the FAS administration console was used for configuration.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://support.citrix.com/article/CTX341587; https://support.citrix.com/article/CTX341587
CVE: CVE-2022-26488
Published: 2022-03-10
Description: In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2.
CVSS Score: 7.0 (HIGH)
CWE: CWE-426
References: https://mail.python.org/archives/list/security-announce%40python.org/thread/657Z4XULWZNIY5FRP3OWXHYKUSIH6DMN/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://mail.python.org/archives/list/security-announce%40python.org/thread/657Z4XULWZNIY5FRP3OWXHYKUSIH6DMN/
CVE: CVE-2022-26520
Published: 2022-03-10
Description: In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/pgjdbc/pgjdbc/pull/2454/commits/017b929977b4f85795f9ad2fa5de6e80978b8ccc; https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8; https://jdbc.postgresql.org/documentation/changelog.html#version_42.3.3
CVE: CVE-2022-26521
Published: 2022-03-10
Description: Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media Manager>Images settings can be changed by an administrator (e.g., by configuring .php to be a valid image file type).
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/171487/Abantecart-1.3.2-Remote-Code-Execution.html; https://github.com/sartlabs/0days/blob/main/Abantecart/Exploit.txt; http://packetstormsecurity.com/files/171487/Abantecart-1.3.2-Remote-Code-Execution.html