deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20945
Published: 2022-09-30
Description: A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain parameters within association request frames received by the AP. An attacker could exploit this vulnerability by sending a crafted 802.11 association request to a nearby device. An exploit could allow the attacker to unexpectedly reload the device, resulting in a DoS condition.
CVSS Score: 7.4 (HIGH)
CWE: CWE-120, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-assoc-dos-EgVqtON8; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-assoc-dos-EgVqtON8
CVE: CVE-2022-35155
Published: 2022-09-30
Description: Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://bus.com; http://phpgurukul.com; https://github.com/shellshok3/Cross-Site-Scripting-XSS/blob/main/Bus%20Pass%20Management%20System%201.0.md
CVE: CVE-2022-35156
Published: 2022-09-30
Description: Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php..
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://bus.com; http://phpgurukul.com; https://packetstormsecurity.com/files/168555/Bus-Pass-Management-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2022-40341
Published: 2022-09-30
Description: mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: http://mojoportal.com; https://weed-1.gitbook.io/cve/mojoportal/upload-malicious-file-in-mojoportal-v2.7-cve-2022-40341; http://mojoportal.com
CVE: CVE-2022-40756
Published: 2022-09-30
Description: If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/write access) to remove specific security files in order to reset the master password and gain access to the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://actian.my.salesforce.com/sfc/p/#300000001XnW/a/4y000000LhjZ/s7Hk0dFM1Z9nLuAPa50rMaZie7mqCR5u33NZFbdKT7Q; https://www.actian.com/support-services/; https://actian.my.salesforce.com/sfc/p/#300000001XnW/a/4y000000LhjZ/s7Hk0dFM1Z9nLuAPa50rMaZie7mqCR5u33NZFbdKT7Q
CVE: CVE-2022-40923
Published: 2022-09-30
Description: A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/lief-project/LIEF/issues/784; https://github.com/lief-project/LIEF/issues/784
CVE: CVE-2022-40943
Published: 2022-09-30
Description: Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Qrayyy/CVE/blob/main/Dairy%20Farm%20Shop%20Management%20System/bwdate-report-ds-sql%28CVE-2022-40943%29.md; https://phpgurukul.com/dairy-farm-shop-management-system-using-php-and-mysql/; https://github.com/Qrayyy/CVE/blob/main/Dairy%20Farm%20Shop%20Management%20System/bwdate-report-ds-sql%28CVE-2022-40943%29.md
CVE: CVE-2022-34428
Published: 2022-09-30
Description: Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://www.dell.com/support/kbdoc/en-us/000203345/dsa-2022-260-dell-hybrid-client-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000203345/dsa-2022-260-dell-hybrid-client-security-update-for-multiple-vulnerabilities
CVE: CVE-2022-34429
Published: 2022-09-30
Description: Dell Hybrid Client below 1.8 version contains a Zip Slip Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability, leading to system files modification.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.dell.com/support/kbdoc/en-us/000203345/dsa-2022-260-dell-hybrid-client-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000203345/dsa-2022-260-dell-hybrid-client-security-update-for-multiple-vulnerabilities
CVE: CVE-2022-39268
Published: 2022-09-30
Description: ### Impact In a CSRF attack, an innocent end user is tricked by an attacker into submitting a web request that they did not intend. This may cause actions to be performed on the website that can include inadvertent client or server data leakage, change of session state, or manipulation of an end user's account. ### Patch Upgrade to v2022.09.10 to patch this vulnerability. ### Workarounds Rebuild and redeploy the Orchest `auth-server` with this commit: https://github.com/orchest/orchest/commit/c2587a963cca742c4a2503bce4cfb4161bf64c2d ### References https://en.wikipedia.org/wiki/Cross-site_request_forgery https://cwe.mitre.org/data/definitions/352.html ### For more information If you have any questions or comments about this advisory: * Open an issue in https://github.com/orchest/orchest * Email us at rick@orchest.io
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/orchest/orchest/commit/c2587a963cca742c4a2503bce4cfb4161bf64c2d; https://github.com/orchest/orchest/pull/1324; https://github.com/orchest/orchest/releases/tag/v2022.09.10
CVE: CVE-2022-42002
Published: 2022-10-01
Description: SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-787
References: https://github.com/lane711/sonicjs/tags; https://snyk.io/blog/graphql-security-static-analysis-snyk-code/; https://github.com/lane711/sonicjs/tags
CVE: CVE-2022-42003
Published: 2022-10-02
Description: In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020; https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33; https://github.com/FasterXML/jackson-databind/issues/3590
CVE: CVE-2022-42004
Published: 2022-10-02
Description: In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490; https://github.com/FasterXML/jackson-databind/commit/[PII_REDACTED]18fec19a9293ed2f17ec53ea80ba88; https://github.com/FasterXML/jackson-databind/issues/3582
CVE: CVE-2022-41040
Published: 2022-10-03
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-918, CWE-918
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41040; http://packetstormsecurity.com/files/170066/Microsoft-Exchange-ProxyNotShell-Remote-Code-Execution.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41040
CVE: CVE-2022-41082
Published: 2022-10-03
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-502, CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41082; http://packetstormsecurity.com/files/170066/Microsoft-Exchange-ProxyNotShell-Remote-Code-Execution.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41082
CVE: CVE-2022-40886
Published: 2022-10-03
Description: DedeCMS 5.7.98 has a file upload vulnerability in the background.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/Ephemeral1y/Vulnerability/blob/master/DedeCMS/5.7.98/DedeCMS-v5.7.98-RCE.md; https://github.com/Ephemeral1y/Vulnerability/blob/master/DedeCMS/5.7.98/DedeCMS-v5.7.98-RCE.md
CVE: CVE-2022-36551
Published: 2022-10-03
Description: A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in these versions of Label Studio enabling a remote attacker to create a new account and then exploit the SSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: http://heartex.com; http://labelstud.io; http://packetstormsecurity.com/files/171548/Label-Studio-1.5.0-Server-Side-Request-Forgery.html
CVE: CVE-2022-32173
Published: 2022-10-03
Description: In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/OrchardCMS/OrchardCore/commit/0163c88ddeaca39815d7e6e5ea1c8391085cc136; https://www.mend.io/vulnerability-database/CVE-2022-32173; https://github.com/OrchardCMS/OrchardCore/commit/0163c88ddeaca39815d7e6e5ea1c8391085cc136
CVE: CVE-2022-38817
Published: 2022-10-03
Description: Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/dapr/dashboard; https://github.com/dapr/dashboard/issues/222; https://github.com/dapr/dashboard
CVE: CVE-2022-40123
Published: 2022-10-03
Description: mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://mojoportal.com; https://weed-1.gitbook.io/cve/mojoportal/directory-traversal-in-mojoportal-v2.7-cve-2022-40123; http://mojoportal.com
CVE: CVE-2022-40922
Published: 2022-10-03
Description: A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/lief-project/LIEF/issues/781; https://github.com/lief-project/LIEF/issues/781
CVE: CVE-2022-1480
Published: 2022-10-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-2628
Published: 2022-10-03
Description: The DSGVO All in one for WP WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e712f83e-b437-4bc6-9511-2b0290ed315d; https://wpscan.com/vulnerability/e712f83e-b437-4bc6-9511-2b0290ed315d
CVE: CVE-2022-2763
Published: 2022-10-03
Description: The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/36a7b872-31fa-4375-9be7-8f787e616ed5; https://wpscan.com/vulnerability/36a7b872-31fa-4375-9be7-8f787e616ed5
CVE: CVE-2022-2839
Published: 2022-10-03
Description: The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them to perform Stored Cross-Site Scripting attacks against logged in admins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/82e01f95-81c2-46d8-898e-07b3b8a3f8c9; https://wpscan.com/vulnerability/82e01f95-81c2-46d8-898e-07b3b8a3f8c9
CVE: CVE-2022-3124
Published: 2022-10-03
Description: The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608; https://wpscan.com/vulnerability/00f76765-95af-4dbc-8c37-f1b15a0e8608
CVE: CVE-2022-3125
Published: 2022-10-03
Description: The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/d3d9dc9a-226b-4f76-995e-e2af1dd6b17e; https://wpscan.com/vulnerability/d3d9dc9a-226b-4f76-995e-e2af1dd6b17e
CVE: CVE-2022-3128
Published: 2022-10-03
Description: The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/[PII_REDACTED]-9b81-9c2748806cf4; https://wpscan.com/vulnerability/[PII_REDACTED]-9b81-9c2748806cf4
CVE: CVE-2022-3132
Published: 2022-10-03
Description: The Goolytics WordPress plugin before 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ed2dc1b9-f9f9-4e99-87b3-a614c223dd64; https://wpscan.com/vulnerability/ed2dc1b9-f9f9-4e99-87b3-a614c223dd64
CVE: CVE-2022-41419
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_Processor::Process function in the mp4encrypt binary.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/axiomatic-systems/Bento4/issues/766; https://github.com/axiomatic-systems/Bento4/issues/766
CVE: CVE-2022-41420
Published: 2022-10-03
Description: nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392810; https://bugzilla.nasm.us/show_bug.cgi?id=3392810
CVE: CVE-2022-41423
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/axiomatic-systems/Bento4/issues/767; https://github.com/axiomatic-systems/Bento4/issues/767
CVE: CVE-2022-41424
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_SttsAtom::Create function in mp42hls.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/axiomatic-systems/Bento4/issues/768; https://github.com/axiomatic-systems/Bento4/issues/768
CVE: CVE-2022-41425
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4decrypt.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/axiomatic-systems/Bento4/issues/772; https://github.com/axiomatic-systems/Bento4/issues/772
CVE: CVE-2022-41426
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_AtomFactory::CreateAtomFromStream function in mp4split.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/axiomatic-systems/Bento4/issues/772; https://github.com/axiomatic-systems/Bento4/issues/772
CVE: CVE-2022-41427
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4_AvcFrameParser::Feed function in mp4mux.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/axiomatic-systems/Bento4/issues/772; https://github.com/axiomatic-systems/Bento4/issues/772
CVE: CVE-2022-41428
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/773; https://github.com/axiomatic-systems/Bento4/issues/773
CVE: CVE-2022-41429
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString function in mp4tag.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/773; https://github.com/axiomatic-systems/Bento4/issues/773
CVE: CVE-2022-41430
Published: 2022-10-03
Description: Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/773; https://github.com/axiomatic-systems/Bento4/issues/773
CVE: CVE-2022-33883
Published: 2022-10-03
Description: A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0019; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0019
CVE: CVE-2022-33884
Published: 2022-10-03
Description: Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE: CVE-2022-33885
Published: 2022-10-03
Description: A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE: CVE-2022-33886
Published: 2022-10-03
Description: A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an unhandled exception. A malicious actor could leverage this vulnerability to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-755
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE: CVE-2022-33887
Published: 2022-10-03
Description: A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-755
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE: CVE-2022-33888
Published: 2022-10-03
Description: A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
CVE: CVE-2022-33889
Published: 2022-10-03
Description: A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021
CVE: CVE-2022-33890
Published: 2022-10-03
Description: A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021
CVE: CVE-2022-40721
Published: 2022-10-03
Description: Arbitrary file upload vulnerability in php uploader
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.openwall.com/lists/oss-security/2022/10/03/3; http://www.vapidlabs.com/advisory.php?v=216; https://github.com/CreativeDream/php-uploader/issues/23%2C
CVE: CVE-2022-40764
Published: 2022-10-03
Description: Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in the vendor.json ignore field, affecting snyk-go-plugin before 1.19.1. This affects, for example, the Snyk TeamCity plugin (which does not update automatically) before 20[PII_REDACTED]57.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/snyk/cli/releases/tag/v1.996.0; https://github.com/snyk/snyk-go-plugin/releases/tag/v1.19.1; https://support.snyk.io/hc/en-us/articles/[PII_REDACTED]789-CVE-2022-40764-Command-Injection-vulnerability-affecting-Snyk-CLI-versions-prior-to-1-996-0
CVE: CVE-2022-41301
Published: 2022-10-03
Description: A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0018; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0018