deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-23599
Published: 2022-01-28
Description: Products.ATContentTypes are the core content types for Plone 2.1 - 4.3. Versions of Plone that are dependent on Products.ATContentTypes prior to version 3.0.6 are vulnerable to reflected cross site scripting and open redirect when an attacker can get a compromised version of the image_view_fullscreen page in a cache, for example in Varnish. The technique is known as cache poisoning. Any later visitor can get redirected when clicking on a link on this page. Usually only anonymous users are affected, but this depends on the user's cache settings. Version 3.0.6 of Products.ATContentTypes has been released with a fix. This version works on Plone 5.2, Python 2 only. As a workaround, make sure the image_view_fullscreen page is not stored in the cache. More information about the vulnerability and cvmitigation measures is available in the GitHub Security Advisory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-601, CWE-79
References: https://github.com/plone/Products.ATContentTypes/commit/fc793f88f35a15a68b52e4abed77af0da5fdbab8; https://github.com/plone/Products.ATContentTypes/security/advisories/GHSA-g4c2-ghfg-g5rh; https://github.com/plone/Products.ATContentTypes/commit/fc793f88f35a15a68b52e4abed77af0da5fdbab8
CVE: CVE-2022-24122
Published: 2022-01-29
Description: kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f9d87929d451d3e649699d0f1d74f71f77ad38f5; https://github.com/torvalds/linux/commit/f9d87929d451d3e649699d0f1d74f71f77ad38f5; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSR3AI2IQGRKZCHNKF6S25JGDKUEAWWL/
CVE: CVE-2021-46657
Published: 2022-01-29
Description: get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.
CVSS Score: 5.5 (MEDIUM)
References: https://jira.mariadb.org/browse/MDEV-25629; https://mariadb.com/kb/en/security/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-46658
Published: 2022-01-29
Description: save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
CVSS Score: 5.5 (MEDIUM)
References: https://jira.mariadb.org/browse/MDEV-25630; https://mariadb.com/kb/en/security/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-46659
Published: 2022-01-29
Description: MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.
CVSS Score: 5.5 (MEDIUM)
References: https://jira.mariadb.org/browse/MDEV-25631; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE: CVE-2022-24123
Published: 2022-01-29
Description: MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md file containing a mutation Cross-Site Scripting (XSS) payload.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/marktext/marktext/issues/2946; https://github.com/marktext/marktext/pull/2947; https://github.com/marktext/marktext/issues/2946
CVE: CVE-2022-24124
Published: 2022-01-29
Description: The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/166163/Casdoor-1.13.0-SQL-Injection.html; https://github.com/casdoor/casdoor/compare/v1.13.0...v1.13.1; https://github.com/casdoor/casdoor/issues/439
CVE: CVE-2021-46660
Published: 2022-01-30
Description: Signiant Manager+Agents before 15.1 allows XML External Entity (XXE) attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://help.signiant.com/flight-deck/general/release-notes-15-1; https://www.signiant.com/technology/security/; https://help.signiant.com/flight-deck/general/release-notes-15-1
CVE: CVE-2022-24032
Published: 2022-01-30
Description: Adenza AxiomSL ControllerView through 10.8.1 is vulnerable to user enumeration. An attacker can identify valid usernames on the platform because a failed login attempt produces a different error message when the username is valid.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/jdordonezn/CVE-2022-24032/issues/1; https://github.com/jdordonezn/CVE-2022-24032/issues/1
CVE: CVE-2022-22919
Published: 2022-01-30
Description: Adenza AxiomSL ControllerView through 10.8.1 allows redirection for SSO login URLs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/jdordonezn/CVE-2022-22919/issues/1; https://github.com/jdordonezn/CVE-2022-22919/issues/1
CVE: CVE-2022-0273
Published: 2022-01-30
Description: Improper Access Control in Pypi calibreweb prior to 0.6.16.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf; https://huntr.dev/bounties/8f27686f-d698-4ab6-8ef0-899125792f13; https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf
CVE: CVE-2022-0339
Published: 2022-01-30
Description: Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/janeczku/calibre-web/commit/3b216bfa07ec7992eff03e55d61732af6df9bb92; https://huntr.dev/bounties/499688c4-6ac4-4047-a868-7922c3eab369; https://github.com/janeczku/calibre-web/commit/3b216bfa07ec7992eff03e55d61732af6df9bb92
CVE: CVE-2022-0407
Published: 2022-01-30
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/vim/vim/commit/44db8213d38c39877d2148eff6a72f4beccfb94e; https://huntr.dev/bounties/81822bf7-aafe-4d37-b836-1255d46e572c; https://security.gentoo.org/glsa/202208-32
CVE: CVE-2022-0408
Published: 2022-01-30
Description: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/vim/vim/commit/06f15416bb8d5636200a10776f1752c4d6e49f31; https://huntr.dev/bounties/5e635bad-5cf6-46cd-aeac-34ef224e179d; https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html
CVE: CVE-2022-0413
Published: 2022-01-30
Description: Use After Free in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/vim/vim/commit/37f47958b8a2a44abc60614271d9537e7f14e51a; https://huntr.dev/bounties/563d1e8f-5c3d-4669-941c-3216f4a87c38; https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html
CVE: CVE-2022-24130
Published: 2022-01-31
Description: xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://invisible-island.net/xterm/xterm.log.html; https://lists.debian.org/debian-lts-announce/2022/02/msg00007.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/
CVE: CVE-2021-27971
Published: 2022-01-31
Description: Alps Alpine Touchpad Driver 10.3201.101.215 is vulnerable to DLL Injection.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/165690/Alps-Alpine-Touchpad-Driver-DLL-Injection.html; http://packetstormsecurity.com/files/165690/Alps-Alpine-Touchpad-Driver-DLL-Injection.html
CVE: CVE-2021-34805
Published: 2022-01-31
Description: An issue was discovered in FAUST iServer before 9.0.019.019.7. For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/165701/FAUST-iServer-9.0.018.018.4-Local-File-Inclusion.html; http://www.land-software.de/lfs.fau?prj=iweb&dn=faust+iserver; https://sec-consult.com/vulnerability-lab/
CVE: CVE-2021-45079
Published: 2022-01-31
Description: In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-476
References: https://www.strongswan.org/blog/2022/01/24/strongswan-vulnerability-%28cve-2021-45079%29.html; https://www.strongswan.org/blog/2022/01/24/strongswan-vulnerability-%28cve-2021-45079%29.html
CVE: CVE-2022-23409
Published: 2022-01-31
Description: The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/165706/Ethercreative-Logs-3.0.3-Path-Traversal.html; https://plugins.craftcms.com/logs; https://sec-consult.com/vulnerability-lab/
CVE: CVE-2021-23520
Published: 2022-01-31
Description: The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/juce-framework/JUCE/commit/2e874e80cba0152201aff6a4d0dc407997d10a7f; https://snyk.io/research/zip-slip-vulnerability; https://snyk.io/vuln/SNYK-UNMANAGED-JUCEFRAMEWORKJUCE-2388607
CVE: CVE-2021-23521
Published: 2022-01-31
Description: This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In some cases, this can allow an attacker to execute arbitrary code. The vulnerable code is in the ZipFile::uncompressEntry function in juce_ZipFile.cpp and is executed when the archive is extracted upon calling uncompressTo() on a ZipFile object.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://github.com/juce-framework/JUCE/commit/2e874e80cba0152201aff6a4d0dc407997d10a7f; https://snyk.io/vuln/SNYK-UNMANAGED-JUCEFRAMEWORKJUCE-2388608; https://github.com/juce-framework/JUCE/commit/2e874e80cba0152201aff6a4d0dc407997d10a7f
CVE: CVE-2022-0414
Published: 2022-01-31
Description: Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://github.com/dolibarr/dolibarr/commit/37fb02ee760cfff18c795ba468da1ba1c53f4684; https://huntr.dev/bounties/76f3b405-9f5d-44b1-8434-b52b56ee395f; https://github.com/dolibarr/dolibarr/commit/37fb02ee760cfff18c795ba468da1ba1c53f4684
CVE: CVE-2021-44255
Published: 2022-01-31
Description: Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrary code on the server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-306
References: https://github.com/ccrisan/motioneyeos/issues/2843; https://www.pizzapower.me/2021/10/09/self-hosted-security-part-1-motioneye/; https://github.com/ccrisan/motioneyeos/issues/2843
CVE: CVE-2020-36056
Published: 2022-01-31
Description: Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.09_55 was discovered to contain a cross-site scripting (XSS) vulnerability via the Ping diagnostic option.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/VivekPanday12/CVE-/issues/5; https://www.linkedin.com/in/vivek-panday-796768149; https://github.com/VivekPanday12/CVE-/issues/5
CVE: CVE-2020-36064
Published: 2022-01-31
Description: Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/VivekPanday12/CVE-/issues/2; https://projectworlds.in/free-projects/php-projects/online-book-store-project-in-php/; https://www.sourcecodester.com
CVE: CVE-2021-46101
Published: 2022-01-31
Description: In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.
CVSS Score: 7.5 (HIGH)
References: https://github.com/0xADY/git_rce; https://github.com/0xADY/git_rce
CVE: CVE-2021-28962
Published: 2022-01-31
Description: Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.
CVSS Score: 7.2 (HIGH)
References: https://advisories.stormshield.eu/; https://advisories.stormshield.eu/2021-007/; https://documentation.stormshield.eu/SNS/v4/en/Content/Release_Notes_SNS/Getting_Started_RNO.htm
CVE: CVE-2021-31617
Published: 2022-01-31
Description: In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://advisories.stormshield.eu/; https://advisories.stormshield.eu/2021-020/; https://advisories.stormshield.eu/
CVE: CVE-2021-40033
Published: 2022-01-31
Description: There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800; CloudEngine 5800 V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 V200R005C10SPC800, V200R019C00SPC800.
CVSS Score: 5.5 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-infodis-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-infodis-en
CVE: CVE-2021-40042
Published: 2022-01-31
Description: There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-763
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-invalid-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-invalid-en
CVE: CVE-2021-46458
Published: 2022-01-31
Description: Victor CMS v1.0 was discovered to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post. This vulnerability can be exploited through a crafted POST request via the post_title parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/Nguyen-Trung-Kien/CVE; https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2021-46458/CVE-2021-46458.pdf; https://github.com/Nguyen-Trung-Kien/CVE
CVE: CVE-2022-0286
Published: 2022-01-31
Description: A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=105cd17a866017b45f3c45901b394c711c97bf40; https://syzkaller.appspot.com/bug?id=160f641886d88bf11cbf1236cc4db994bb210626; https://www.oracle.com/security-alerts/cpujul2022.html
CVE: CVE-2021-42631
Published: 2022-01-31
Description: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: http://printerlogic.com; https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints; https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
CVE: CVE-2021-42635
Published: 2022-01-31
Description: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: http://printerlogic.com; https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints; https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
CVE: CVE-2021-44114
Published: 2022-01-31
Description: Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40mayhem7999/cve-2021-44114-957145c1773; https://www.sourcecodester.com/php/15023/stock-management-system-phpoop-source-code.html; https://medium.com/%40mayhem7999/cve-2021-44114-957145c1773
CVE: CVE-2021-46459
Published: 2022-01-31
Description: Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request via the user_name, user_firstname,user_lastname, or user_email parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/Nguyen-Trung-Kien/CVE; https://github.com/Nguyen-Trung-Kien/CVE/tree/main/CVE-2021-46459; https://github.com/Nguyen-Trung-Kien/CVE
CVE: CVE-2022-21659
Published: 2022-01-31
Description: Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exists a user enumeration vulnerability. This vulnerability allows for a non authenticated user to enumerate existing accounts by timing the response time from the server when you are logging in. Users are advised to upgrade to version 3.4.4 as soon as possible. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://github.com/dpgaspar/Flask-AppBuilder/pull/1775; https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-wfjw-w6pv-8p7f; https://github.com/dpgaspar/Flask-AppBuilder/pull/1775
CVE: CVE-2022-23872
Published: 2022-01-31
Description: Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/configure.php via the parameter footer_info.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/emlog/emlog/issues/147; https://github.com/truonghuuphuc/CVE; https://github.com/emlog/emlog/issues/147
CVE: CVE-2022-24263
Published: 2022-01-31
Description: Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/165882/Hospital-Management-System-4.0-SQL-Injection.html; https://github.com/kishan0725/Hospital-Management-System/issues/17; https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24263
CVE: CVE-2022-24264
Published: 2022-01-31
Description: Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the search_word parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/CuppaCMS/CuppaCMS/issues/13; https://github.com/truonghuuphuc/CVE; https://github.com/CuppaCMS/CuppaCMS/issues/13
CVE: CVE-2022-24265
Published: 2022-01-31
Description: Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_filter=3 parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/CuppaCMS/CuppaCMS/issues/14; https://github.com/truonghuuphuc/CVE; https://github.com/CuppaCMS/CuppaCMS/issues/14
CVE: CVE-2022-24266
Published: 2022-01-31
Description: Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the order_by parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/CuppaCMS/CuppaCMS/issues/17; https://github.com/truonghuuphuc/CVE; https://github.com/CuppaCMS/CuppaCMS/issues/17
CVE: CVE-2021-46661
Published: 2022-02-01
Description: MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).
CVSS Score: 5.5 (MEDIUM)
References: https://jira.mariadb.org/browse/MDEV-25766; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE: CVE-2021-46662
Published: 2022-02-01
Description: MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.
CVSS Score: 5.5 (MEDIUM)
References: https://jira.mariadb.org/browse/MDEV-25637; https://mariadb.com/kb/en/security/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-46663
Published: 2022-02-01
Description: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.
CVSS Score: 5.5 (MEDIUM)
References: https://jira.mariadb.org/browse/MDEV-26351; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE: CVE-2021-46664
Published: 2022-02-01
Description: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://jira.mariadb.org/browse/MDEV-25761; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE: CVE-2021-46665
Published: 2022-02-01
Description: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.
CVSS Score: 5.5 (MEDIUM)
References: https://jira.mariadb.org/browse/MDEV-25636; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
CVE: CVE-2021-46666
Published: 2022-02-01
Description: MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://jira.mariadb.org/browse/MDEV-25635; https://mariadb.com/kb/en/security/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-46667
Published: 2022-02-01
Description: MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://jira.mariadb.org/browse/MDEV-26350; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/