deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30330
Published: 2022-05-07
Description: In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader code to compromise the hardware wallet across reboots or storage wipes.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: https://blog.inhq.net/posts/keepkey-CVE-2022-30330/; https://github.com/keepkey/keepkey-firmware/commit/447c1f038a31378ab9589965c098467d9ea6cccc; https://github.com/keepkey/keepkey-firmware/releases/tag/v7.3.2
CVE: CVE-2022-30334
Published: 2022-05-07
Description: Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that use Tor as a proxy. Brave does NOT implement most of the privacy protections from Tor Browser."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/brave/brave-browser/issues/18071; https://github.com/brave/brave-core/pull/10760; https://hackerone.com/reports/1337624
CVE: CVE-2022-1616
Published: 2022-05-07
Description: Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/d88934406c5375d88f8f1b65331c9f0cab68cc6c
CVE: CVE-2018-25033
Published: 2022-05-08
Description: ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/admesh/admesh/issues/28; https://lists.debian.org/debian-lts-announce/2022/05/msg00029.html; https://github.com/admesh/admesh/issues/28
CVE: CVE-2022-1619
Published: 2022-05-08
Description: Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/ef02f16609ff0a26ffc6e[PII_REDACTED]4980898fe
CVE: CVE-2022-1620
Published: 2022-05-08
Description: NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/8e4b76da1d7e987d43ca960dfbc372d1c617466f
CVE: CVE-2022-28470
Published: 2022-05-08
Description: marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/joajfreitas/marcador/issues/5; https://pypi.org/project/marcador/
CVE: CVE-2022-28463
Published: 2022-05-08
Description: ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/ImageMagick/ImageMagick/commit/ca3654ebf7a439dc736f56f083c9aa98e4464b7f; https://github.com/ImageMagick/ImageMagick/issues/4988; https://github.com/ImageMagick/ImageMagick6/commit/e6ea5876e0228165ee3abc6e959aa174cee06680
CVE: CVE-2022-23066
Published: 2022-05-09
Description: In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to transfer tokens or not. The vulnerability affects both integrity and may cause serious availability problems.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-682
References: https://blocksecteam.medium.com/how-a-critical-bug-in-solana-network-was-detected-and-timely-patched-a701870e1324; https://github.com/solana-labs/rbpf/commit/e61e045f8c244de978401d186dcfd[PII_REDACTED]7; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23066
CVE: CVE-2022-30333
Published: 2022-05-09
Description: RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22, CWE-59
References: http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html; https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/; https://lists.debian.org/debian-lts-announce/2023/08/msg00022.html
CVE: CVE-2022-30286
Published: 2022-05-09
Description: pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/167069/PyScript-2022-05-04-Alpha-Source-Code-Disclosure.html; https://cyber-guy.gitbook.io/cyber-guy/blogs/the-art-of-vulnerability-chaining-pyscript; https://cyber-guy.gitbook.io/cyber-guy/pocs/pyscript-file-read
CVE: CVE-2022-1631
Published: 2022-05-09
Description: Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s Email. This allows an attacker to gain pre-authentication to the victim’s account. Further, due to the lack of proper validation of email coming from Social Login and failing to check if an account already exists, the victim will not identify if an account is already existing. Hence, the attacker’s persistence will remain. An attacker would be able to see all the activities performed by the victim user impacting the confidentiality and attempt to modify/corrupt the data impacting the integrity and availability factor. This attack becomes more interesting when an attacker can register an account from an employee’s email address. Assuming the organization uses G-Suite, it is much more impactful to hijack into an employee’s account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-863
References: http://packetstormsecurity.com/files/167376/Microweber-CMS-1.2.15-Account-Takeover.html; https://github.com/microweber/microweber/commit/c162dfffb9bfd264d232aaaf5bb3daee16a3cb38; https://huntr.dev/bounties/5494e258-5c7b-44b4-b443-85cff7ae0ba4
CVE: CVE-2022-23332
Published: 2022-05-09
Description: Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://en.ejointech.com/; https://drive.google.com/drive/folders/1QRs6wos3mL9289TTUm98n5OmgBVrbYTx; https://github.com/kyl3song/CVE/tree/main/CVE-2022-23332
CVE: CVE-2022-27224
Published: 2022-05-09
Description: An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated attacker can perform command injection as root via shell metacharacters within the Network Tools section of the web-management interface. All three networking tools are affected (Ping, Traceroute, and DNS Lookup) and their respective input fields (ping_address, trace_address, nslookup_address).
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://gist.github.com/somerandomdudeonetheinternet/2caeb201e249160fa82204ef640c8cdf; https://www.galsys.co.uk/support/software-download.html; https://www.pentestpartners.com/security-blog/galleon-nts-6002-gps-command-injection-vulnerability-cve-2022-27224/
CVE: CVE-2019-25060
Published: 2022-05-09
Description: The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on the affected site. Because of this, a remote attacker could forge a GraphQL query to retrieve the account roles of every user on the site.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/wp-graphql/wp-graphql/pull/900; https://wpscan.com/vulnerability/393be73a-f8dc-462f-8670-f20ab89421fc; https://github.com/wp-graphql/wp-graphql/pull/900
CVE: CVE-2021-20479
Published: 2022-05-09
Description: IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 197498.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/197498; https://www.ibm.com/support/pages/node/6562263; https://exchange.xforce.ibmcloud.com/vulnerabilities/197498
CVE: CVE-2022-0424
Published: 2022-05-09
Description: The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://wpscan.com/vulnerability/1e4593fd-51e5-43ca-a244-9aaef3804b9f; https://wpscan.com/vulnerability/1e4593fd-51e5-43ca-a244-9aaef3804b9f
CVE: CVE-2022-0592
Published: 2022-05-09
Description: The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/5d8d53ad-dc88-4b50-a292-fc447484c27b; https://wpscan.com/vulnerability/5d8d53ad-dc88-4b50-a292-fc447484c27b
CVE: CVE-2022-0625
Published: 2022-05-09
Description: The Admin Menu Editor WordPress plugin through 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ec5c331c-fb74-4ccc-a4d4-446c2b4e703a; https://wpscan.com/vulnerability/ec5c331c-fb74-4ccc-a4d4-446c2b4e703a
CVE: CVE-2022-0814
Published: 2022-05-09
Description: The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269; https://wpscan.com/vulnerability/fd84dc08-0079-4fcf-81c3-a61d652e3269
CVE: CVE-2022-0817
Published: 2022-05-09
Description: The BadgeOS WordPress plugin through 3.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/69263610-f454-4f27-80af-be523d25659e; https://wpscan.com/vulnerability/69263610-f454-4f27-80af-be523d25659e
CVE: CVE-2022-0826
Published: 2022-05-09
Description: The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/7a3eed3b-c643-4e24-b833-eba60ab631c5; https://wpscan.com/vulnerability/7a3eed3b-c643-4e24-b833-eba60ab631c5
CVE: CVE-2022-0836
Published: 2022-05-09
Description: The SEMA API WordPress plugin before 4.02 does not properly sanitise and escape some parameters before using them in SQL statements via an AJAX action, leading to SQL Injections exploitable by unauthenticated users
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/2a226ae8-7d9c-4f47-90af-8a399a08f03f; https://wpscan.com/vulnerability/2a226ae8-7d9c-4f47-90af-8a399a08f03f
CVE: CVE-2022-0874
Published: 2022-05-09
Description: The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/36cdd130-9bb7-4274-bac6-07d00008d810; https://wpscan.com/vulnerability/36cdd130-9bb7-4274-bac6-07d00008d810
CVE: CVE-2022-0898
Published: 2022-05-09
Description: The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f51d8345-3927-4be2-8145-e201371c8c43; https://wpscan.com/vulnerability/f51d8345-3927-4be2-8145-e201371c8c43
CVE: CVE-2022-0948
Published: 2022-05-09
Description: The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2707223; https://wpscan.com/vulnerability/daad48df-6a25-493f-9d1d-17b897462576; https://plugins.trac.wordpress.org/changeset/2707223
CVE: CVE-2022-1013
Published: 2022-05-09
Description: The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/eed70659-9e3e-42a2-b427-56c52e0fbc0d; https://wpscan.com/vulnerability/eed70659-9e3e-42a2-b427-56c52e0fbc0d
CVE: CVE-2022-1047
Published: 2022-05-09
Description: The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/078bd5f6-64f7-4665-825b-9fd0c2b7b91b; https://wpscan.com/vulnerability/078bd5f6-64f7-4665-825b-9fd0c2b7b91b
CVE: CVE-2022-1104
Published: 2022-05-09
Description: The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4d4709f3-ad38-4519-a24a-73bc04b20e52; https://wpscan.com/vulnerability/4d4709f3-ad38-4519-a24a-73bc04b20e52
CVE: CVE-2022-1171
Published: 2022-05-09
Description: The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/dc5eace4-542f-47e9-b870-a6aae6a38b0f; https://wpscan.com/vulnerability/dc5eace4-542f-47e9-b870-a6aae6a38b0f
CVE: CVE-2022-1303
Published: 2022-05-09
Description: The Slide Anything WordPress plugin before 2.3.44 does not sanitize and escape sliders' description, which could allow high privilege users such as editor and above to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/590b446d-f8bc-49b0-93e7-2a6f2e6f62f1; https://wpscan.com/vulnerability/590b446d-f8bc-49b0-93e7-2a6f2e6f62f1
CVE: CVE-2022-1338
Published: 2022-05-09
Description: The Easily Generate Rest API Url WordPress plugin through 1.0.0 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/51b91d0e-33af-41ce-b95f-d422586f1d5f; https://wpscan.com/vulnerability/51b91d0e-33af-41ce-b95f-d422586f1d5f
CVE: CVE-2022-22319
Published: 2022-05-09
Description: IBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could cause disruption for any scripts dependent on the queue. IBM X-Force ID: 218366.
CVSS Score: 5.4 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/218366; https://www.ibm.com/support/pages/node/6569203; https://www.ibm.com/support/pages/node/6583547
CVE: CVE-2022-22481
Published: 2022-05-09
Description: IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/225899; https://www.ibm.com/support/pages/node/6583553; https://exchange.xforce.ibmcloud.com/vulnerabilities/225899
CVE: CVE-2022-27114
Published: 2022-05-09
Description: There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpeg_read_scanlines function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/michaelrsweet/htmldoc/commit/31f780487e5ddc[PII_REDACTED]86cdc[PII_REDACTED]5; https://github.com/michaelrsweet/htmldoc/issues/471; https://lists.debian.org/debian-lts-announce/2022/05/msg00014.html
CVE: CVE-2022-28161
Published: 2022-05-09
Description: An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability, the attacker would need to have valid user credentials and turn on debug mode.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1840; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1840
CVE: CVE-2022-28162
Published: 2022-05-09
Description: Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.
CVSS Score: 3.3 (LOW)
CWE: CWE-312
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1841; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1841
CVE: CVE-2022-27308
Published: 2022-05-09
Description: A stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a project title.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/166966/PHProjekt-PhpSimplyGest-MyProjects-1.3.0-Cross-Site-Scripting.html; http://phprojekt.altervista.org/phpsimplygest130/; https://github.com/robyfofo/PhpSimplyGest
CVE: CVE-2022-27412
Published: 2022-05-09
Description: Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/166694/Explore-CMS-1.0-SQL-Injection.html; https://exploreit.com.bd; http://packetstormsecurity.com/files/166694/Explore-CMS-1.0-SQL-Injection.html
CVE: CVE-2022-28738
Published: 2022-05-09
Description: A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://hackerone.com/reports/1220911; https://security-tracker.debian.org/tracker/CVE-2022-28738; https://security.gentoo.org/glsa/202401-27
CVE: CVE-2022-28739
Published: 2022-05-09
Description: There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/29; http://seclists.org/fulldisclosure/2022/Oct/30
CVE: CVE-2022-29933
Published: 2022-05-09
Description: Craft CMS through 3.7.36 allows a remote unauthenticated attacker, who knows at least one valid username, to reset the account's password and take over the account by providing a crafted HTTP header to the application while using the password reset functionality. Specifically, the attacker must send X-Forwarded-Host to the /index.php?p=admin/actions/users/send-password-reset-email URI. NOTE: the vendor's position is that a customer can already work around this by adjusting the configuration (i.e., by not using the default configuration).
CVSS Score: 8.8 (HIGH)
CWE: CWE-640
References: http://packetstormsecurity.com/files/166989/Craft-CMS-3.7.36-Password-Reset-Poisoning-Attack.html; https://github.com/craftcms/cms/blob/develop/CHANGELOG.md; https://sec-consult.com/vulnerability-lab/
CVE: CVE-2022-29971
Published: 2022-05-09
Description: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88
References: https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/; https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/; https://www.magnitude.com/products/data-connectivity
CVE: CVE-2022-29972
Published: 2022-05-09
Description: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88
References: https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/; https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/; https://www.magnitude.com/products/data-connectivity
CVE: CVE-2022-30239
Published: 2022-05-09
Description: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88
References: https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/; https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/; https://www.magnitude.com/products/data-connectivity