deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-37436
Published: 2023-01-17
Description: Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-113, CWE-436, CWE-113
References: https://httpd.apache.org/security/vulnerabilities_24.html; https://security.gentoo.org/glsa/202309-01; https://httpd.apache.org/security/vulnerabilities_24.html
CVE: CVE-2022-4891
Published: 2023-01-17
Description: A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the function to_plain of the file lib/sisimai/string.rb. The manipulation leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. Upgrading to version 4.25.14p12 is able to address this issue. The name of the patch is 51fe2e6521c9c02b421b383943dc9e4bbbe65d4e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218452.
CVSS Score: 3.5 (LOW)
CWE: CWE-1333
References: https://gist.githubusercontent.com/gmcabrita/e5dc0332473fc2e3a7a407434c8d21c7/raw/00b12035e5e1b685469f143b94301a50306376ba/example.html; https://github.com/sisimai/rb-sisimai/commit/51fe2e6521c9c02b421b383943dc9e4bbbe65d4e; https://github.com/sisimai/rb-sisimai/pull/244
CVE: CVE-2023-22624
Published: 2023-01-17
Description: Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://www.manageengine.com/products/exchange-reports/advisory/CVE-2023-22624.html; https://www.manageengine.com/products/exchange-reports/advisory/CVE-2023-22624.html
CVE: CVE-2023-23749
Published: 2023-01-17
Description: The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST parameter. An attacker can manipulate this paramter to dump arbitrary contents form the LDAP Database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74, CWE-74
References: https://extensions.joomla.org/vulnerable-extensions/resolved/ldap-integration-with-active-directory-and-openldap-ntlm-kerberos-login-5-0-2-other/; https://extensions.joomla.org/vulnerable-extensions/resolved/ldap-integration-with-active-directory-and-openldap-ntlm-kerberos-login-5-0-2-other/
CVE: CVE-2021-36647
Published: 2023-01-17
Description: Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://github.com/ARMmbed/mbedtls/releases/; https://kouzili.com/Load-Step.pdf; https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-07-1
CVE: CVE-2022-23538
Published: 2023-01-17
Description: github.com/sylabs/scs-library-client is the Go client for the Singularity Container Services (SCS) Container Library Service. When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occurs in a specific flow, where the library service redirects the client to a backing S3 storage server, to perform a multi-part concurrent download. Depending on site configuration, the S3 service may be provided by a third party. An attacker with access to the S3 service may be able to extract user credentials, allowing them to impersonate the user. The vulnerable multi-part concurrent download flow, with redirect to S3, is only used when communicating with a Singularity Enterprise 1.x installation, or third party server implementing this flow. Interaction with Singularity Enterprise 2.x, and Singularity Container Services (cloud.sylabs.io), does not trigger the vulnerable flow. We encourage all users to update. Users who interact with a Singularity Enterprise 1.x installation, using a 3rd party S3 storage service, are advised to revoke and recreate their authentication tokens within Singularity Enterprise. There is no workaround available at this time.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://github.com/sylabs/scs-library-client/commit/68ac4cab5cda0afd8758ff5b5e2e57be6a22fcfa; https://github.com/sylabs/scs-library-client/commit/b5db2aacba6bf1231f42dd475cc32e6355ab47b2; https://github.com/sylabs/scs-library-client/commit/eebd7caaab310b1fa803e55b8fc1acd9dcd2d00c
CVE: CVE-2022-2251
Published: 2023-01-17
Description: Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who creates a branch with a specially crafted name and gets another user to trigger a pipeline to execute commands in the runner as that other user.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2251.json; https://gitlab.com/gitlab-org/gitlab-runner/-/issues/27386; https://hackerone.com/reports/1063511
CVE: CVE-2022-2907
Published: 2023-01-17
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It was possible to read repository content by an unauthorised user if a project member used a crafted link.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2907.json; https://gitlab.com/gitlab-org/gitlab/-/issues/349388; https://hackerone.com/reports/1417680
CVE: CVE-2022-39195
Published: 2023-01-17
Description: A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary JavaScript or HTML via the c parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://packetstormsecurity.com/2301-exploits/listserv17-xss.txt; https://peach.ease.lsoft.com/scripts/wa-PEACH.exe?A0=LSTSRV-L; https://packetstormsecurity.com/2301-exploits/listserv17-xss.txt
CVE: CVE-2022-40319
Published: 2023-01-17
Description: The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email address in a wa.exe URL. The impact is unauthorized modification of a victim's LISTSERV account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://packetstormsecurity.com/2301-exploits/listserv17-idor.txt; https://peach.ease.lsoft.com/scripts/wa-PEACH.exe?A0=LSTSRV-L; https://packetstormsecurity.com/2301-exploits/listserv17-idor.txt
CVE: CVE-2022-43975
Published: 2023-01-17
Description: An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. A vulnerability in the web server allows arbitrary files and configurations to be read via directory traversal over TCP port 8888.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json; https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json
CVE: CVE-2022-43976
Published: 2023-01-17
Description: An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. Direct access to the API is possible on TCP port 8888 via programs located in the cgi-bin folder without any authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json; https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json
CVE: CVE-2022-43977
Published: 2023-01-17
Description: An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks access control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json; https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json
CVE: CVE-2022-46475
Published: 2023-01-17
Description: D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/Insight8991/iot/blob/main/DIR-645%20genacgi%20Stack%20overflow.md; https://github.com/Insight8991/iot/blob/main/DIR-645%20genacgi%20Stack%20overflow.md
CVE: CVE-2022-47929
Published: 2023-01-17
Description: In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.6; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96398560f26aa07e8f2969d73c8197e6a6d10407; https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html
CVE: CVE-2023-0122
Published: 2023-01-17
Description: A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://www.openwall.com/lists/oss-security/2023/01/18/1; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=da0342a3aa[PII_REDACTED]e6283df86444e1117168; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-0296
Published: 2023-01-17
Description: The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-327
References: https://bugzilla.redhat.com/show_bug.cgi?id=2161287; https://bugzilla.redhat.com/show_bug.cgi?id=2161287
CVE: CVE-2023-22499
Published: 2023-01-17
Description: Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the terminal screen after permission prompt was shown and write a generic message. This situation impacts users who use Web Worker API and relied on interactive permission prompt. The reproduction is very timing sensitive and can’t be reliably reproduced on every try. This problem can not be exploited on systems that do not attach an interactive prompt (for example headless servers). The problem has been fixed in Deno v1.29.3; it is recommended all users update to this version. Users are advised to upgrade. Users unable to upgrade may run with --no-prompt flag to disable interactive permission prompts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://github.com/denoland/deno/pull/17392; https://github.com/denoland/deno/security/advisories/GHSA-mc52-jpm2-cqh6; https://github.com/denoland/deno/pull/17392
CVE: CVE-2023-22727
Published: 2023-01-17
Description: CakePHP is a development framework for PHP web apps. In affected versions the `Cake\Database\Query::limit()` and `Cake\Database\Query::offset()` methods are vulnerable to SQL injection if passed un-sanitized user request data. This issue has been fixed in 4.2.12, 4.3.11, 4.4.10. Users are advised to upgrade. Users unable to upgrade may mitigate this issue by using CakePHP's Pagination library. Manually validating or casting parameters to these methods will also mitigate the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.html; https://github.com/cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239; https://github.com/cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wp
CVE: CVE-2023-23637
Published: 2023-01-17
Description: IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to the ontology builder. This may allow attackers to steal Protected Health Information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/lambda-science/IMPatienT/compare/v1.5.1...v1.5.2; https://github.com/lambda-science/IMPatienT/issues/101; https://github.com/lambda-science/IMPatienT/releases/tag/v1.5.2
CVE: CVE-2021-32837
Published: 2023-01-17
Description: mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a web server responds in a malicious way, then mechanize could crash. Version 0.4.6 has a patch for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/python-mechanize/mechanize/blob/3acb1836f3fd8edc5a758a417dd46b53832ae3b5/mechanize/_urllib2_fork.py#L878-L879; https://github.com/python-mechanize/mechanize/commit/dd05334448e9f39814bab044d2eaa5ef69b410d6; https://github.com/python-mechanize/mechanize/releases/tag/v0.4.6
CVE: CVE-2022-41953
Published: 2023-01-17
Description: Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GUI has a function to clone repositories. Immediately after the local clone is available, Git GUI will automatically post-process it, among other things running a spell checker called `aspell.exe` if it was found. Git GUI is implemented as a Tcl/Tk script. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable _always includes the current directory_. Therefore, malicious repositories can ship with an `aspell.exe` in their top-level directory which is executed by Git GUI without giving the user a chance to inspect it first, i.e. running untrusted code. This issue has been addressed in version 2.39.1. Users are advised to upgrade. Users unable to upgrade should avoid using Git GUI for cloning. If that is not a viable option, at least avoid cloning from untrusted sources.
CVSS Score: 8.6 (HIGH)
CWE: CWE-426
References: https://github.com/git-for-windows/git/commit/7360767e8dfc1895a932324079f7d45d7791d39f; https://github.com/git-for-windows/git/pull/4219; https://github.com/git-for-windows/git/security/advisories/GHSA-v4px-mx59-w99c
CVE: CVE-2023-22730
Published: 2023-01-17
Description: Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible to put the same line item multiple times in the cart using the AP. The Cart Validators checked the line item's individuality and the user was able to bypass quantity limits in sales. This problem has been fixed with version 6.4.18.1. Users on major versions 6.1, 6.2, and 6.3 may also obtain this fix via a plugin. 

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates; https://github.com/shopware/platform/commit/4fce12096e54b2033832d9104fa2e68888c2b4e9; https://github.com/shopware/platform/security/advisories/GHSA-8r6h-m72v-38fg
CVE: CVE-2023-22731
Published: 2023-01-17
Description: Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the Sandbox extension**, it is possible to refer to PHP functions in twig filters like `map`, `filter`, `sort`. This allows a template to call any global PHP function and thus execute arbitrary code. The attacker must have access to a Twig environment in order to exploit this vulnerability. This problem has been fixed with 6.4.18.1 with an override of the specified filters until the integration of the Sandbox extension has been finished. Users are advised to upgrade. Users of major versions 6.1, 6.2, and 6.3 may also receive this fix via a plugin.

CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates; https://github.com/shopware/platform/commit/89d1ea154689cb6202e0d3a0ceeae0febb0c09e1; https://github.com/shopware/platform/security/advisories/GHSA-93cw-f5jj-x85w
CVE: CVE-2023-22732
Published: 2023-01-17
Description: Shopware is an open source commerce platform based on Symfony Framework and Vue js. The Administration session expiration was set to one week, when an attacker has stolen the session cookie they could use it for a long period of time. In version 6.4.18.1 an automatic logout into the Administration session has been added. As a result the user will be logged out when they are inactive. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS Score: 3.7 (LOW)
CWE: CWE-613
References: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates; https://github.com/shopware/platform/commit/cd7a89cbcd3a0428c6d1ef27b3aa15467a722ff6; https://github.com/shopware/platform/security/advisories/GHSA-59qg-93jg-236f
CVE: CVE-2023-22733
Published: 2023-01-17
Description: Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions the log module would write out all kind of sent mails. An attacker with access to either the local system logs or a centralized logging store may have access to other users accounts. This issue has been addressed in version 6.4.18.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version. Users unable to upgrade may remove from all users the log module ACL rights or disable logging.
CVSS Score: 2.7 (LOW)
CWE: CWE-532
References: https://developer.shopware.com/docs/guides/hosting/performance/performance-tweaks#logging; https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates; https://github.com/shopware/platform/commit/407a83063d7141c1a626441799c3ebef79498c07
CVE: CVE-2023-22734
Published: 2023-01-17
Description: Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validation was not checked properly, and it was possible to skip the complete double opt in process. As a result operators may have inconsistencies in their newsletter systems. This problem has been fixed with version 6.4.18.1. Users are advised to upgrade. Users unable to upgrade may find security measures are available via a plugin for major versions 6.1, 6.2, and 6.3. Users may also disable newsletter registration completely.

CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updates; https://github.com/shopware/platform/commit/f5a95ee2bcf1e[PII_REDACTED]63ef1d9886e59a620; https://github.com/shopware/platform/security/advisories/GHSA-46h7-vj7x-fxg2
CVE: CVE-2014-125081
Published: 2023-01-17
Description: A vulnerability, which was classified as critical, has been found in risheesh debutsav. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named 7a8430df79277c[PII_REDACTED]01cc792db894fc76. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218459.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/risheesh/debutsav/commit/7a8430df79277c[PII_REDACTED]01cc792db894fc76; https://vuldb.com/?ctiid.218459; https://vuldb.com/?id.218459
CVE: CVE-2015-10065
Published: 2023-01-17
Description: A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function init_result of the file validator/my_validator.cpp. The manipulation leads to buffer overflow. The patch is identified as ee2eef34a83644f286c9adcaf30437f92e9c48f1. It is recommended to apply a patch to fix this issue. VDB-218458 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/AenBleidd/FiND/commit/ee2eef34a83644f286c9adcaf30437f92e9c48f1; https://vuldb.com/?ctiid.218458; https://vuldb.com/?id.218458
CVE: CVE-2017-20171
Published: 2023-01-17
Description: A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the file db/sql/mysqlUtils.js. The manipulation leads to sql injection. The identifier of the patch is 954425f61634b556fe644837a592a5b8fcfca068. It is recommended to apply a patch to fix this issue. The identifier VDB-218457 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/PrivateSky/apersistence/commit/954425f61634b556fe644837a592a5b8fcfca068; https://vuldb.com/?ctiid.218457; https://vuldb.com/?id.218457
CVE: CVE-2022-23521
Published: 2023-01-17
Description: Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge. These overflows can be triggered via a crafted `.gitattributes` file that may be part of the commit history. Git silently splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/git/git/commit/508386c6c5857b4faa2c3e491f422c98cc69ae76; https://github.com/git/git/security/advisories/GHSA-c738-c5qq-xg89; https://security.gentoo.org/glsa/202312-15