deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-3285
Published: 2022-11-09
Description: Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an unauthorized attacker to prevent access to GitLab
CVSS Score: 5.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3285.json; https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/issues/64; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3285.json
CVE: CVE-2022-3483
Published: 2022-11-09
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all versions starting from 15.5 before 15.5.2. A malicious maintainer could exfiltrate a Datadog integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server.
CVSS Score: 5.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3483.json; https://gitlab.com/gitlab-org/gitlab/-/issues/377799; https://hackerone.com/reports/1724402
CVE: CVE-2022-3486
Published: 2022-11-09
Description: An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allows an attacker to redirect users to an arbitrary location if they trust the URL.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3486.json; https://gitlab.com/gitlab-org/gitlab/-/issues/377810; https://hackerone.com/reports/1725190
CVE: CVE-2022-39368
Published: 2022-11-10
Description: Eclipse Californium is a Java implementation of RFC7252 - Constrained Application Protocol for IoT Cloud services. In versions prior to 3.7.0, and 2.7.4, Californium is vulnerable to a Denial of Service. Failing handshakes don't cleanup counters for throttling, causing the threshold to be reached without being released again. This results in permanently dropping records. The issue was reported for certificate based handshakes, but may also affect PSK based handshakes. It generally affects client and server as well. This issue is patched in version 3.7.0 and 2.7.4. There are no known workarounds. main: commit 726bac57659410da463dcf404b3e79a7312ac0b9 2.7.x: commit 5648a0c27c2c2667c[PII_REDACTED]7a14bac2b1f3f
CVSS Score: 8.2 (HIGH)
CWE: CWE-404, CWE-459, CWE-404, CWE-459
References: https://github.com/eclipse-californium/californium/commit/5648a0c27c2c2667c[PII_REDACTED]7a14bac2b1f3f; https://github.com/eclipse-californium/californium/commit/726bac57659410da463dcf404b3e79a7312ac0b9; https://github.com/eclipse-californium/californium/security/advisories/GHSA-p72g-cgh9-ghjg
CVE: CVE-2022-3413
Published: 2022-11-10
Description: Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allowed Developers to view the project's Audit Events and Developers or Maintainers to view the group's Audit Events. These should have been restricted to Project Maintainers, Group Owners, and above.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3413.json; https://gitlab.com/gitlab-org/gitlab/-/issues/374926; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3413.json
CVE: CVE-2022-3706
Published: 2022-11-10
Description: Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user retrying a job in a downstream pipeline to take ownership of the retried jobs in the upstream pipeline even if the user doesn't have access to that project.
CVSS Score: 3.1 (LOW)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3706.json; https://gitlab.com/gitlab-org/gitlab/-/issues/365532; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3706.json
CVE: CVE-2022-3726
Published: 2022-11-10
Description: Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick a user to click on the Swagger OpenAPI viewer and issue HTTP requests that affect the victim's account.
CVSS Score: 4.8 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3726.json; https://gitlab.com/gitlab-org/gitlab/-/issues/362509; https://hackerone.com/reports/1563383
CVE: CVE-2022-3793
Published: 2022-11-10
Description: An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to read variables set directly in a GitLab CI/CD configuration file they don't have access to.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3793.json; https://gitlab.com/gitlab-org/gitlab/-/issues/372120; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3793.json
CVE: CVE-2022-3818
Published: 2022-11-10
Description: An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to cause performance issues and potentially a denial of service on the GitLab instance.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3818.json; https://gitlab.com/gitlab-org/gitlab/-/issues/358170; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3818.json
CVE: CVE-2022-3819
Published: 2022-11-10
Description: An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a malicious users to set emojis on internal notes they don't have access to.
CVSS Score: 3.5 (LOW)
CWE: CWE-863, CWE-863
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3819.json; https://gitlab.com/gitlab-org/gitlab/-/issues/365847; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3819.json
CVE: CVE-2022-39396
Published: 2022-11-10
Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior to 4.10.18, and prior to 5.3.1 on the 5.X branch, are vulnerable to Remote Code Execution via prototype pollution. An attacker can use this prototype pollution sink to trigger a remote code execution through the MongoDB BSON parser. This issue is patched in version 5.3.1 and in 4.10.18. There are no known workarounds.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321, CWE-1321
References: https://github.com/parse-community/parse-server/security/advisories/GHSA-prm5-8g2m-24gg; https://github.com/parse-community/parse-server/security/advisories/GHSA-prm5-8g2m-24gg
CVE: CVE-2022-39398
Published: 2022-11-10
Description: tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross-site Scripting (XSS) - Create XSS in task content (when add it). This issue is patched in version 2.0.3. There are no known workarounds.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/InfotelGLPI/tasklists/commit/4a1b30f3d9fa764695f98ce011c[PII_REDACTED]d47; https://github.com/InfotelGLPI/tasklists/security/advisories/GHSA-3qv3-8393-777q; https://github.com/InfotelGLPI/tasklists/commit/4a1b30f3d9fa764695f98ce011c[PII_REDACTED]d47
CVE: CVE-2022-3866
Published: 2022-11-10
Description: HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs in the same namespace. Fixed in 1.4.2.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://discuss.hashicorp.com/t/hcsec-2022-25-nomad-s-workload-identity-token-can-list-non-sensitive-metadata-for-nomad-paths/46167; https://discuss.hashicorp.com/t/hcsec-2022-25-nomad-s-workload-identity-token-can-list-non-sensitive-metadata-for-nomad-paths/46167
CVE: CVE-2022-3867
Published: 2022-11-10
Description: HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.
CVSS Score: 2.7 (LOW)
CWE: CWE-613, CWE-613
References: https://discuss.hashicorp.com/t/hcsec-2022-26-nomad-s-event-stream-subscriber-using-acl-token-with-ttl-receive-updates-until-garbage-collected/46168; https://discuss.hashicorp.com/t/hcsec-2022-26-nomad-s-event-stream-subscriber-using-acl-token-with-ttl-receive-updates-until-garbage-collected/46168
CVE: CVE-2022-45129
Published: 2022-11-10
Description: Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise before 5.45.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.html; http://seclists.org/fulldisclosure/2022/Nov/11; https://blog.payara.fish/whats-new-in-the-november-2022-payara-platform-release
CVE: CVE-2022-45130
Published: 2022-11-10
Description: Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password. NOTE: Obsidian is a specific version of the Plesk product: version numbers were used through version 12, and then the convention was changed so that versions are identified by names ("Obsidian"), not numbers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://fortbridge.co.uk/research/compromising-plesk-via-its-rest-api/; https://fortbridge.co.uk/research/compromising-plesk-via-its-rest-api/
CVE: CVE-2022-42786
Published: 2022-11-10
Description: Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cert.vde.com/de/advisories/VDE-2022-043/; https://cert.vde.com/de/advisories/VDE-2022-043/
CVE: CVE-2022-42787
Published: 2022-11-10
Description: Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required.
CVSS Score: 8.8 (HIGH)
CWE: CWE-330, CWE-330
References: https://cert.vde.com/de/advisories/VDE-2022-043; https://cert.vde.com/de/advisories/VDE-2022-043
CVE: CVE-2022-31255
Published: 2022-11-10
Description: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files available to the user running the process, typically tomcat. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.2 hub-xmlrpc-api-0.7-150300.3.9.2, inter-server-sync-0.2.4-150300.8.25.2, locale-formula-0.3-150300.3.3.2, py27-compat-salt-3000.3-150300.7.7.26.2, python-urlgrabber-3.10.2.1py2_3-150300.3.3.2, spacecmd-4.2.20-150300.4.30.2, spacewalk-backend-4.2.25-150300.4.32.4, spacewalk-client-tools-4.2.21-150300.4.27.3, spacewalk-java-4.2.43-150300.3.48.2, spacewalk-utils-4.2.18-150300.3.21.2, spacewalk-web-4.2.30-150300.3.30.3, susemanager-4.2.38-150300.3.44.3, susemanager-doc-indexes-4.2-150300.12.36.3, susemanager-docs_en-4.2-150300.12.36.2, susemanager-schema-4.2.25-150300.3.30.3, susemanager-sls versions prior to 4.2.28. SUSE Linux Enterprise Module for SUSE Manager Server 4.3 spacewalk-java versions prior to 4.3.39. SUSE Manager Server 4.2 release-notes-susemanager versions prior to 4.2.10.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://bugzilla.suse.com/show_bug.cgi?id=1204543; https://bugzilla.suse.com/show_bug.cgi?id=1204543
CVE: CVE-2022-38119
Published: 2022-11-10
Description: UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.twcert.org.tw/tw/cp-132-6678-e9fbe-1.html; https://www.twcert.org.tw/tw/cp-132-6678-e9fbe-1.html
CVE: CVE-2022-38120
Published: 2022-11-10
Description: UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-6679-a0695-1.html; https://www.twcert.org.tw/tw/cp-132-6679-a0695-1.html
CVE: CVE-2022-38121
Published: 2022-11-10
Description: UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.twcert.org.tw/tw/cp-132-6680-af0aa-1.html; https://www.twcert.org.tw/tw/cp-132-6680-af0aa-1.html
CVE: CVE-2022-38122
Published: 2022-11-10
Description: UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://www.twcert.org.tw/tw/cp-132-6681-e9650-1.html; https://www.twcert.org.tw/tw/cp-132-6681-e9650-1.html
CVE: CVE-2022-39036
Published: 2022-11-10
Description: The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary file and execute arbitrary code to manipulate system or disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.flowring.com/2022/09/19/%e7%94%a2%e5%93%81%e6%9b%b4%e6%96%b0agentflow-v4-0%e3%80%81v3-7%e5%a4%be%e6%aa%94%e5%8a%9f%e8%83%bd%e8%b3%87%e5%ae%89%e4%bf%ae%e6%ad%a3/; https://www.twcert.org.tw/tw/cp-132-6682-21207-1.html; https://www.flowring.com/2022/09/19/%e7%94%a2%e5%93%81%e6%9b%b4%e6%96%b0agentflow-v4-0%e3%80%81v3-7%e5%a4%be%e6%aa%94%e5%8a%9f%e8%83%bd%e8%b3%87%e5%ae%89%e4%bf%ae%e6%ad%a3/
CVE: CVE-2022-39037
Published: 2022-11-10
Description: Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.flowring.com/2022/09/19/%e7%94%a2%e5%93%81%e6%9b%b4%e6%96%b0agentflow-v4-0%e3%80%81v3-7%e5%a4%be%e6%aa%94%e5%8a%9f%e8%83%bd%e8%b3%87%e5%ae%89%e4%bf%ae%e6%ad%a3/; https://www.twcert.org.tw/tw/cp-132-6683-57b71-1.html; https://www.flowring.com/2022/09/19/%e7%94%a2%e5%93%81%e6%9b%b4%e6%96%b0agentflow-v4-0%e3%80%81v3-7%e5%a4%be%e6%aa%94%e5%8a%9f%e8%83%bd%e8%b3%87%e5%ae%89%e4%bf%ae%e6%ad%a3/
CVE: CVE-2022-39038
Published: 2022-11-10
Description: Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.flowring.com/2022/09/19/%e7%94%a2%e5%93%81%e6%9b%b4%e6%96%b0agentflow-v4-0%e3%80%81v3-7%e5%a4%be%e6%aa%94%e5%8a%9f%e8%83%bd%e8%b3%87%e5%ae%89%e4%bf%ae%e6%ad%a3/; https://www.twcert.org.tw/tw/cp-132-6684-53149-1.html; https://www.flowring.com/2022/09/19/%e7%94%a2%e5%93%81%e6%9b%b4%e6%96%b0agentflow-v4-0%e3%80%81v3-7%e5%a4%be%e6%aa%94%e5%8a%9f%e8%83%bd%e8%b3%87%e5%ae%89%e4%bf%ae%e6%ad%a3/
CVE: CVE-2022-43753
Published: 2022-11-10
Description: A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files available to the user running the process, typically tomcat. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.2 hub-xmlrpc-api-0.7-150300.3.9.2, inter-server-sync-0.2.4-150300.8.25.2, locale-formula-0.3-150300.3.3.2, py27-compat-salt-3000.3-150300.7.7.26.2, python-urlgrabber-3.10.2.1py2_3-150300.3.3.2, spacecmd-4.2.20-150300.4.30.2, spacewalk-backend-4.2.25-150300.4.32.4, spacewalk-client-tools-4.2.21-150300.4.27.3, spacewalk-java-4.2.43-150300.3.48.2, spacewalk-utils-4.2.18-150300.3.21.2, spacewalk-web-4.2.30-150300.3.30.3, susemanager-4.2.38-150300.3.44.3, susemanager-doc-indexes-4.2-150300.12.36.3, susemanager-docs_en-4.2-150300.12.36.2, susemanager-schema-4.2.25-150300.3.30.3, susemanager-sls versions prior to 4.2.28. SUSE Linux Enterprise Module for SUSE Manager Server 4.3 spacewalk-java versions prior to 4.3.39. SUSE Manager Server 4.2 release-notes-susemanager versions prior to 4.2.10.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://bugzilla.suse.com/show_bug.cgi?id=1204716; https://bugzilla.suse.com/show_bug.cgi?id=1204716
CVE: CVE-2022-43754
Published: 2022-11-10
Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to embed Javascript code via /rhn/audit/scap/Search.do This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.2 hub-xmlrpc-api-0.7-150300.3.9.2, inter-server-sync-0.2.4-150300.8.25.2, locale-formula-0.3-150300.3.3.2, py27-compat-salt-3000.3-150300.7.7.26.2, python-urlgrabber-3.10.2.1py2_3-150300.3.3.2, spacecmd-4.2.20-150300.4.30.2, spacewalk-backend-4.2.25-150300.4.32.4, spacewalk-client-tools-4.2.21-150300.4.27.3, spacewalk-java-4.2.43-150300.3.48.2, spacewalk-utils-4.2.18-150300.3.21.2, spacewalk-web-4.2.30-150300.3.30.3, susemanager-4.2.38-150300.3.44.3, susemanager-doc-indexes-4.2-150300.12.36.3, susemanager-docs_en-4.2-150300.12.36.2, susemanager-schema-4.2.25-150300.3.30.3, susemanager-sls versions prior to 4.2.28. SUSE Linux Enterprise Module for SUSE Manager Server 4.3 spacewalk-java versions prior to 4.3.39. SUSE Manager Server 4.2 release-notes-susemanager versions prior to 4.2.10.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: https://bugzilla.suse.com/show_bug.cgi?id=1204741; https://bugzilla.suse.com/show_bug.cgi?id=1204741
CVE: CVE-2022-44087
Published: 2022-11-10
Description: ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZOOM_HIGHT.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://espcms.com; https://gitee.com/earclink/espcms/issues/I5WSA0; http://espcms.com
CVE: CVE-2022-44088
Published: 2022-11-10
Description: ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://espcms.com; https://gitee.com/earclink/espcms/issues/I5WSND; http://espcms.com
CVE: CVE-2022-44089
Published: 2022-11-10
Description: ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://espcms.com; https://gitee.com/earclink/espcms/issues/I5WSQ1; http://espcms.com
CVE: CVE-2022-34666
Published: 2022-11-10
Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-45063
Published: 2022-11-10
Description: xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2022/11/10/1; http://www.openwall.com/lists/oss-security/2022/11/10/5; http://www.openwall.com/lists/oss-security/2024/06/15/1
CVE: CVE-2022-44727
Published: 2022-11-10
Description: The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://addons.prestashop.com/en/legal/8734-eu-cookie-law-gdpr-banner-blocker.html; https://securityandstuff.com/posts/cve-2022-44727/; https://www.lineagrafica.es/modp/lgcookieslaw/en/readme_en.pdf
CVE: CVE-2021-40226
Published: 2022-11-10
Description: xpdfreader 4.03 is vulnerable to Buffer Overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=42185; https://forum.xpdfreader.com/viewtopic.php?f=3&t=42185
CVE: CVE-2021-40289
Published: 2022-11-10
Description: mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/phachon/mm-wiki/issues/319; https://github.com/phachon/mm-wiki/issues/319
CVE: CVE-2022-36022
Published: 2022-11-10
Description: Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests through version 1.0.0-M2.1 may use some unclaimed S3 buckets in tests in examples. This is likely affect people who use some older NLP examples that reference an old S3 bucket. The problem has been patched. Users should upgrade to snapshots as Deeplearning4J plan to publish a release with the fix at a later date. As a workaround, download a word2vec google news vector from a new source using git lfs from here.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-344, CWE-330
References: https://github.com/eclipse/deeplearning4j/security/advisories/GHSA-rc39-g977-687w; https://github.com/mmihaltz/word2vec-GoogleNews-vectors; https://github.com/eclipse/deeplearning4j/security/advisories/GHSA-rc39-g977-687w