deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-28488
Published: 2022-05-04
Description: The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://github.com/marc-q/libwav/issues/29; https://github.com/tin-z/Stuff_and_POCs/blob/main/poc_libwav/POC; https://github.com/marc-q/libwav/issues/29
CVE: CVE-2022-28512
Published: 2022-05-04
Description: A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md; https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html; https://github.com/JiuBanSec/CVE/blob/main/Fantastic%20Blog%20CMS/SQL1.md
CVE: CVE-2022-28552
Published: 2022-05-04
Description: Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/chshcms/cscms/issues/10; https://github.com/chshcms/cscms/issues/10
CVE: CVE-2022-28568
Published: 2022-05-04
Description: Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://doctors.com; http://sourcecodetester.com; https://github.com/b3nj1-1/CVE/tree/main/CVE-2022-28568
CVE: CVE-2022-28806
Published: 2022-05-04
Description: An issue was discovered on certain Fujitsu LIEFBOOK devices (A3510, U9310, U7511/U7411/U7311, U9311, E5510/E5410, U7510/U7410/U7310, E459/E449) with BIOS versions before v1.09 (A3510), v2.17 (U9310), v2.30 (U7511/U7411/U7311), v2.33 (U9311), v2.23 (E5510), v2.19 (U7510/U7410), v2.13 (U7310), and v1.09 (E459/E449). The FjGabiFlashCoreAbstractionSmm driver registers a Software System Management Interrupt (SWSMI) handler that is not sufficiently validated to ensure that the CommBuffer (or any other communication buffer's nested contents) are not pointing to SMRAM contents. A potential attacker can therefore write fixed data to SMRAM, which could lead to data corruption inside this memory (e.g., change the SMI handler's code or modify SMRAM map structures to break input pointer validation for other SMI handlers). Thus, the attacker could elevate privileges from ring 0 to ring -2 and execute arbitrary code in SMM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.fmworld.net/biz/common/insyde/20220210/; https://kb.cert.org/vuls/id/796611; https://support.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FCCL-IS-2021-090903-Security-Advisory.asp
CVE: CVE-2022-29347
Published: 2022-05-04
Description: An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://webarchiv.com; http://zeitpraxcom.com; https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2022-29347
CVE: CVE-2022-29950
Published: 2022-05-04
Description: Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the (1) rule name parameter to the Rules page or the (2) subrule name or (3) categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed
CVSS Score: 4.3 (MEDIUM)
References: https://gist.github.com/Voidager88/73c2d512a72cceb0ef84dbf87a497d10; https://www.experian.in/hunter; https://gist.github.com/Voidager88/73c2d512a72cceb0ef84dbf87a497d10
CVE: CVE-2021-20051
Published: 2022-05-04
Description: SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0036; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0036
CVE: CVE-2021-41020
Published: 2022-05-04
Description: An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.
CVSS Score: 8.8 (HIGH)
References: https://fortiguard.com/psirt/FG-IR-21-040; https://fortiguard.com/psirt/FG-IR-21-040
CVE: CVE-2021-41032
Published: 2022-05-04
Description: An improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3 and prior may allow an authenticated attacker with a restricted user profile to gather sensitive information and modify the SSL-VPN tunnel status of other VDOMs using specific CLI commands.
CVSS Score: 6.3 (MEDIUM)
References: https://fortiguard.com/psirt/FG-IR-21-147; https://fortiguard.com/psirt/FG-IR-21-147
CVE: CVE-2021-43206
Published: 2022-05-04
Description: A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1, 2.0.x allows malicious webservers to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://fortiguard.com/psirt/FG-IR-21-231; https://fortiguard.com/psirt/FG-IR-21-231
CVE: CVE-2022-23443
Published: 2022-05-04
Description: An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
CVSS Score: 7.5 (HIGH)
References: https://fortiguard.com/psirt/FG-IR-22-041; https://fortiguard.com/psirt/FG-IR-22-041
CVE: CVE-2022-28556
Published: 2022-05-04
Description: Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow. Similarly, this vulnerability can be used together with CVE-2021-44971
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/doudoudedi/TendaAC15_vul/blob/main/TendaAC15-vul.md; https://github.com/doudoudedi/TendaAC15_vul/blob/main/TendaAC15-vul.md
CVE: CVE-2022-28557
Published: 2022-05-04
Description: There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/doudoudedi/TendaAC15_vul/blob/main/TendaAC15-vul.md; https://github.com/doudoudedi/TendaAC15_vul/blob/main/TendaAC15-vul.md
CVE: CVE-2022-28940
Published: 2022-05-04
Description: In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack.
CVSS Score: 7.5 (HIGH)
References: https://github.com/zhefox/0day/blob/main/%E6%96%B0%E5%8D%8E%E4%B8%89magicR100%E5%AD%98%E5%9C%A8DOS%E6%94%BB%E5%87%BB%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90.md; https://github.com/zhefox/0day/blob/main/%E6%96%B0%E5%8D%8E%E4%B8%89magicR100%E5%AD%98%E5%9C%A8DOS%E6%94%BB%E5%87%BB%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90.md
CVE: CVE-2021-42235
Published: 2022-05-04
Description: SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/osTicket/osTicket/commit/e28291022e662ffa754e170c09cade7bdadf3fd9; https://github.com/osTicket/osTicket/commit/e28291022e662ffa754e170c09cade7bdadf3fd9
CVE: CVE-2022-20734
Published: 2022-05-04
Description: A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, local attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-497, CWE-200
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmge-infodc-WPSkAMhp; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmge-infodc-WPSkAMhp
CVE: CVE-2022-20753
Published: 2022-05-04
Description: A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious input to an affected device. A successful exploit could allow the attacker to execute remote code on the affected device. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbrv-rce-OYLQbL9u; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbrv-rce-OYLQbL9u
CVE: CVE-2022-20764
Published: 2022-05-04
Description: Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destination. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-601
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ROS-DOS-X7H7XhkK; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ROS-DOS-X7H7XhkK
CVE: CVE-2022-20770
Published: 2022-05-04
Description: On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.
CVSS Score: 8.6 (HIGH)
CWE: CWE-399
References: https://lists.debian.org/debian-lts-announce/2022/06/msg00004.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
CVE: CVE-2022-20771
Published: 2022-05-04
Description: On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: https://lists.debian.org/debian-lts-announce/2022/06/msg00004.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
CVE: CVE-2022-20777
Published: 2022-05-04
Description: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-284
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-v56f-9gq3-rx3g; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-MUL-7DySRX9; https://github.com/orangecertcc/security-research/security/advisories/GHSA-v56f-9gq3-rx3g
CVE: CVE-2022-20779
Published: 2022-05-04
Description: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-284, CWE-20
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-77vw-2pmg-q492; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-MUL-7DySRX9; https://github.com/orangecertcc/security-research/security/advisories/GHSA-77vw-2pmg-q492
CVE: CVE-2022-20780
Published: 2022-05-04
Description: Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data from the host to the VM. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-284, CWE-611
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-hrpq-384f-vrpg; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-NFVIS-MUL-7DySRX9; https://github.com/orangecertcc/security-research/security/advisories/GHSA-hrpq-384f-vrpg
CVE: CVE-2022-20785
Published: 2022-05-04
Description: On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://lists.debian.org/debian-lts-announce/2022/06/msg00004.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
CVE: CVE-2022-20794
Published: 2022-05-04
Description: Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destination. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ROS-DOS-X7H7XhkK; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ROS-DOS-X7H7XhkK
CVE: CVE-2022-20796
Published: 2022-05-04
Description: On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-822, CWE-476
References: https://lists.debian.org/debian-lts-announce/2022/06/msg00004.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RV6BLIATIJE74SQ6NG5ZC4JK5MMDQ2R/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BX5ZXNHP4NFYQ5BFSKY3WT7NTBZUYG7L/
CVE: CVE-2022-20799
Published: 2022-05-04
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending malicious input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system of the affected device. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-rv-cmd-inj-8Pv9JMJD; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-rv-cmd-inj-8Pv9JMJD
CVE: CVE-2022-20801
Published: 2022-05-04
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending malicious input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system of the affected device. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-rv-cmd-inj-8Pv9JMJD; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-rv-cmd-inj-8Pv9JMJD
CVE: CVE-2022-23724
Published: 2022-05-04
Description: Use of static encryption key material allows forging an authentication token to other users within a tenant organization. MFA may be bypassed by redirecting an authentication flow to a target user. To exploit the vulnerability, must have compromised user credentials.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-288, CWE-310, CWE-798
References: https://docs.pingidentity.com/bundle/pingid/page/xqz[PII_REDACTED]88.html; https://www.pingidentity.com/en/resources/downloads/pingid.html; https://docs.pingidentity.com/bundle/pingid/page/xqz[PII_REDACTED]88.html
CVE: CVE-2022-1584
Published: 2022-05-04
Description: Reflected XSS in GitHub repository microweber/microweber prior to 1.2.16. Executing JavaScript as the victim
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/527abd148e6b7aff8df92a9f1aa951e5bebac59c; https://huntr.dev/bounties/69f4ca67-d615-4f25-b2d1-19df7bf1107d; https://github.com/microweber/microweber/commit/527abd148e6b7aff8df92a9f1aa951e5bebac59c
CVE: CVE-2022-25786
Published: 2022-05-04
Description: Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-420
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2022-29942
Published: 2022-05-04
Description: Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://Talend.com; https://www.talend.com/security/incident-response/#CVE-2022-29942; https://Talend.com
CVE: CVE-2022-29943
Published: 2022-05-04
Description: Talend Administration Center has a vulnerability that allows an authenticated user to use XML External Entity (XXE) processing to achieve read access as root on the remote filesystem. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://Talend.com; https://www.talend.com/security/incident-response/#CVE-2022-29942; https://Talend.com
CVE: CVE-2022-30241
Published: 2022-05-04
Description: The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/abodelot/jquery.json-viewer/pull/26; https://www.npmjs.com/package/jquery.json-viewer; https://github.com/abodelot/jquery.json-viewer/pull/26
CVE: CVE-2022-29155
Published: 2022-05-04
Description: In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://bugs.openldap.org/show_bug.cgi?id=9815; https://lists.debian.org/debian-lts-announce/2022/05/msg00032.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-30284
Published: 2022-05-04
Description: In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments). NOTE: the vendor believes it would be unrealistic for an application to call NmapProcess with arguments taken from input data that arrived over an untrusted network, and thus the CVSS score corresponds to an unrealistic use case. None of the NmapProcess documentation implies that this is an expected use case
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-88
References: https://github.com/savon-noir/python-libnmap/releases; https://libnmap.readthedocs.io/en/latest/process.html#using-libnmap-process; https://pypi.org/project/python-libnmap/
CVE: CVE-2022-30288
Published: 2022-05-04
Description: Agoo before 2.14.3 does not reject GraphQL fragment spreads that form cycles, leading to an application crash. NOTE: the vendor has disputed this on the grounds that it is not the server's responsibility to "enforce all the various ways a developer could write code with logic errors.
CVSS Score: 7.5 (HIGH)
References: https://github.com/nicholasaleks/graphql-threat-matrix/blob/master/implementations/agoo.md; https://github.com/ohler55/agoo/issues/109; https://spec.graphql.org/October2021/#sec-Fragment-spreads-must-not-form-cycles