deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-4501
Published: 2022-12-14
Description: The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function in versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to update the plugin's settings.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/mega-addons-for-visual-composer/tags/4.2.7/main.php#L87; https://www.wordfence.com/threat-intel/vulnerabilities/id/a1eda885-7e10-4294-9748-5359efd51754?source=cve; https://plugins.trac.wordpress.org/browser/mega-addons-for-visual-composer/tags/4.2.7/main.php#L87
CVE: CVE-2020-4497
Published: 2022-12-14
Description: 
IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. IBM X-Force ID: 182106.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182106; https://www.ibm.com/support/pages/node/6847627; https://exchange.xforce.ibmcloud.com/vulnerabilities/182106
CVE: CVE-2022-3917
Published: 2022-12-14
Description: Improper access control of bootloader function was discovered in Motorola Mobility Motorola e20 prior to version RONS31.267-38-8 allows attacker with local access to read partition or RAM data.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: https://en-us.support.motorola.com/app/answers/detail/a_id/175333; https://en-us.support.motorola.com/app/answers/detail/a_id/175333
CVE: CVE-2022-4410
Published: 2022-12-14
Description: The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output escaping on post/page/media titles. This makes it possible for attackers to inject arbitrary web scripts on the permalink-manager page if another plugin or theme is installed on the site that allows lower privileged users with unfiltered_html the ability to modify post/page titles with malicious web scripts.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2833667%40permalink-manager&new=2833667%40permalink-manager&sfp_email=&sfph_mail=; https://wpscan.com/vulnerability/004a4516-7704-40df-b939-7a8ceeb7e7de; https://www.wordfence.com/threat-intel/vulnerabilities/id/6cbf9636-9d9d-44d4-b873-8920f2dbb846?source=cve
CVE: CVE-2022-4502
Published: 2022-12-15
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879; https://huntr.dev/bounties/5bdef791-6886-4008-b9ba-045cb4524114; https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879
CVE: CVE-2022-4503
Published: 2022-12-15
Description: Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879; https://huntr.dev/bounties/4cba644c-a2f5-4ed7-af5d-f2cab1895e13; https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879
CVE: CVE-2022-4504
Published: 2022-12-15
Description: Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879; https://huntr.dev/bounties/f50538cb-99d3-411d-bd1a-5f36d1fa9f5d; https://github.com/openemr/openemr/commit/37d7ed4855763fc588485f05b2e9cc0944f71879
CVE: CVE-2022-4505
Published: 2022-12-15
Description: Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2.


CVSS Score: 8.8 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/openemr/openemr/commit/235b1910ffe[PII_REDACTED]277d4e197a0c3a9ac33; https://huntr.dev/bounties/e36ca754-bb9f-4686-ad72-7fb849e97d92; https://github.com/openemr/openemr/commit/235b1910ffe[PII_REDACTED]277d4e197a0c3a9ac33
CVE: CVE-2022-4506
Published: 2022-12-15
Description: Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/openemr/openemr/commit/2e7678d812df167ea3c[PII_REDACTED]b670e8aa51f; https://huntr.dev/bounties/f423d193-4ab0-4f03-ad90-25e4f02e7942; https://www.cve.org/CVERecord?id=CVE-2022-4506
CVE: CVE-2022-46768
Published: 2022-12-15
Description: Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://support.zabbix.com/browse/ZBX-22087; https://support.zabbix.com/browse/ZBX-22087
CVE: CVE-2022-27498
Published: 2022-12-15
Description: A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1531; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1531
CVE: CVE-2022-28703
Published: 2022-12-15
Description: A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1532; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1532
CVE: CVE-2022-29511
Published: 2022-12-15
Description: A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1530; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1530
CVE: CVE-2022-29517
Published: 2022-12-15
Description: A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1529; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1529
CVE: CVE-2022-32573
Published: 2022-12-15
Description: A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1528; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1528
CVE: CVE-2022-32763
Published: 2022-12-15
Description: A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-184, CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1541; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1541
CVE: CVE-2020-20588
Published: 2022-12-15
Description: File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/zhimengzhe/iBarn/issues/13; https://github.com/zhimengzhe/iBarn/issues/13
CVE: CVE-2020-20589
Published: 2022-12-15
Description: Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/liufee/cms/issues/45; https://github.com/liufee/cms/issues/45
CVE: CVE-2020-21219
Published: 2022-12-15
Description: Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acme_certificate_edit.php page of the ACME package.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/pfsense/FreeBSD-ports/commit/a6f443cde51e7fcf17e51f16014d[PII_REDACTED]d8; https://redmine.pfsense.org/issues/9888; https://github.com/pfsense/FreeBSD-ports/commit/a6f443cde51e7fcf17e51f16014d[PII_REDACTED]d8
CVE: CVE-2020-24855
Published: 2022-12-15
Description: Directory Traversal vulnerability in easywebpack-cli before 4.5.2 allows attackers to obtain sensitive information via crafted GET request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/easy-team/easywebpack-cli/issues/25; https://github.com/easy-team/easywebpack-cli/issues/25
CVE: CVE-2020-36607
Published: 2022-12-15
Description: Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/liufee/cms/issues/45; https://github.com/liufee/cms/issues/45
CVE: CVE-2021-33420
Published: 2022-12-15
Description: A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://advisory.checkmarx.net/advisory/CX-2021-4787; https://github.com/inikulin/replicator/commit/2c626242fb4a118855262c64b5731b2ce98e521b; https://github.com/inikulin/replicator/issues/16
CVE: CVE-2021-36572
Published: 2022-12-15
Description: Cross Site Scripting (XSS) vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/liufee/cms/issues/58; https://github.com/liufee/cms/issues/58
CVE: CVE-2021-36573
Published: 2022-12-15
Description: File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/liufee/cms/issues/59; https://github.com/liufee/cms/issues/59
CVE: CVE-2021-39426
Published: 2022-12-15
Description: An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals set.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/seacms-com/seacms/issues/21; https://github.com/seacms-com/seacms/issues/21
CVE: CVE-2021-39427
Published: 2022-12-15
Description: Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/vtime-tech/188Jianzhan/issues/4; https://github.com/vtime-tech/188Jianzhan/issues/4
CVE: CVE-2021-39428
Published: 2022-12-15
Description: Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/eyoucms/eyoucms/issues/14; https://github.com/eyoucms/eyoucms/issues/14
CVE: CVE-2021-4226
Published: 2022-12-15
Description: RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: https://wpscan.com/vulnerability/c0ed80c8-ebbf-4ed9-b02f-31660097c352; https://wpscan.com/vulnerability/c0ed80c8-ebbf-4ed9-b02f-31660097c352
CVE: CVE-2022-22063
Published: 2022-12-15
Description: Memory corruption in Core due to improper configuration in boot remapper.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2022-bulletin
CVE: CVE-2022-23474
Published: 2022-12-15
Description: Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94, CWE-79
References: https://github.com/codex-team/editor.js/pull/2100; https://securitylab.github.com/advisories/GHSL-2022-028_codex-team_editor_js/; https://github.com/codex-team/editor.js/pull/2100
CVE: CVE-2022-23507
Published: 2022-12-15
Description: Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform light client verification (e.g. IBC-rs, Hermes). The light client does not check that the chain IDs of the trusted and untrusted headers match, resulting in a possible attack vector where someone who finds a header from an untrusted chain that satisfies all other verification conditions (e.g. enough overlapping validator signatures) could fool a light client. The attack vector is currently theoretical, and no proof-of-concept exists yet to exploit it on live networks. This issue is patched in version 0.28.0. There are no workarounds.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-347
References: https://github.com/informalsystems/tendermint-rs/security/advisories/GHSA-xqqc-c5gw-c5r5; https://github.com/informalsystems/tendermint-rs/security/advisories/GHSA-xqqc-c5gw-c5r5
CVE: CVE-2022-23524
Published: 2022-12-15
Description: Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the _strvals_ package can cause a stack overflow. In Go, a stack overflow cannot be recovered from. Applications that use functions from the _strvals_ package in the Helm SDK can have a Denial of Service attack when they use this package and it panics. This issue has been patched in 3.10.3. SDK users can validate strings supplied by users won't create large arrays causing significant memory usage before passing them to the _strvals_ functions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/helm/helm/security/advisories/GHSA-6rx9-889q-vv2r; https://github.com/helm/helm/security/advisories/GHSA-6rx9-889q-vv2r
CVE: CVE-2022-23525
Published: 2022-12-15
Description: Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the _repo_package. The _repo_ package contains a handler that processes the index file of a repository. For example, the Helm client adds references to chart repositories where charts are managed. The _repo_ package parses the index file of the repository and loads it into structures Go can work with. Some index files can cause array data structures to be created causing a memory violation. Applications that use the _repo_ package in the Helm SDK to parse an index file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. The Helm Client will panic with an index file that causes a memory violation panic. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate index files that are correctly formatted before passing them to the _repo_ functions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/helm/helm/commit/638ebffbc2e445156f3978f02fd83d9af1e56f5b; https://github.com/helm/helm/security/advisories/GHSA-53c4-hhmh-vw5q; https://github.com/helm/helm/commit/638ebffbc2e445156f3978f02fd83d9af1e56f5b
CVE: CVE-2022-23526
Published: 2022-12-15
Description: Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ package that can cause a segmentation violation. The _chartutil_ package contains a parser that loads a JSON Schema validation file. For example, the Helm client when rendering a chart will validate its values with the schema file. The _chartutil_ package parses the schema file and loads it into structures Go can work with. Some schema files can cause array data structures to be created causing a memory violation. Applications that use the _chartutil_ package in the Helm SDK to parse a schema file can suffer a Denial of Service when that input causes a panic that cannot be recovered from. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been patched in 3.10.3. SDK users can validate schema files that are correctly formatted before passing them to the _chartutil_ functions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://github.com/helm/helm/commit/bafafa8bb1b571b61d7a9528da8d40c307dade3d; https://github.com/helm/helm/security/advisories/GHSA-67fx-wx78-jx33; https://github.com/helm/helm/commit/bafafa8bb1b571b61d7a9528da8d40c307dade3d
CVE: CVE-2022-2536
Published: 2022-12-15
Description: The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient validation of settings on the 'tp_translation' AJAX action which makes it possible for unauthenticated attackers to bypass any restrictions and influence the data shown on the site. Please note this is a separate issue from CVE-2022-2461. 

Notes from the researcher: When installed Transposh comes with a set of pre-configured options, one of these is the "Who can translate" setting under the "Settings" tab. However, this option is largely ignored, if Transposh has enabled its "autotranslate" feature (it's enabled by default) and the HTTP POST parameter "sr0" is larger than 0. This is caused by a faulty validation in "wp/transposh_db.php."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2022-2536.txt; https://packetstormsecurity.com/files/168120/wptransposh1081-authz.txt; https://plugins.trac.wordpress.org/browser/transposh-translation-filter-for-wordpress/trunk/transposh.php?rev=2682425#L1989
CVE: CVE-2022-32531
Published: 2022-12-15
Description: The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves
the bookkeeper client vulnerable to a man in the middle attack.

The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://lists.apache.org/thread/xyk2lfc7lzof8mksmwyympbqxts1b5s9; https://lists.apache.org/thread/xyk2lfc7lzof8mksmwyympbqxts1b5s9
CVE: CVE-2022-32833
Published: 2022-12-15
Description: An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/HT213446; https://support.apple.com/kb/HT213442; https://support.apple.com/kb/HT213488
CVE: CVE-2022-32860
Published: 2022-12-15
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, macOS Big Sur 11.6.8. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213346
CVE: CVE-2022-32916
Published: 2022-12-15
Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 16. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213446
CVE: CVE-2022-32942
Published: 2022-12-15
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2022/Dec/23; http://seclists.org/fulldisclosure/2022/Dec/24; http://seclists.org/fulldisclosure/2022/Dec/25
CVE: CVE-2022-32943
Published: 2022-12-15
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2022/Dec/20; http://seclists.org/fulldisclosure/2022/Dec/23; https://support.apple.com/en-us/HT213530
CVE: CVE-2022-32945
Published: 2022-12-15
Description: An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ventura 13. An app may be able to record audio with paired AirPods.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/kb/HT213489; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32948
Published: 2022-12-15
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213346; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-39916
Published: 2022-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.
CVE: CVE-2022-39917
Published: 2022-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.
CVE: CVE-2022-39918
Published: 2022-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.
CVE: CVE-2022-39919
Published: 2022-12-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.