deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25164
Published: 2022-04-14
Description: A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to recover user credentials of the administrative interface.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-759
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25166
Published: 2022-04-14
Description: An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices.
CVSS Score: 7.6 (HIGH)
CWE: CWE-347
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2020-25168
Published: 2022-04-14
Description: Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enable attackers with command line access to access the device’s Wi-Fi module.
CVSS Score: 3.3 (LOW)
CWE: CWE-798
References: https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html; https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02; https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE: CVE-2021-28505
Published: 2022-04-14
Description: On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-863
References: https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073; https://www.arista.com/en/support/advisories-notices/security-advisories/15267-security-advisory-0073
CVE: CVE-2022-1304
Published: 2022-04-14
Description: An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=2069726; https://bugzilla.redhat.com/show_bug.cgi?id=2069726; https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html
CVE: CVE-2022-1328
Published: 2022-04-14
Description: Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-120
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1328.json; https://gitlab.com/muttmua/mutt/-/commit/e5ed080c00e59701ca62ef9b2a6d2612ebf765a5; https://gitlab.com/muttmua/mutt/-/issues/404
CVE: CVE-2022-22966
Published: 2022-04-14
Description: An authenticated, high privileged malicious actor with network access to the VMware Cloud Director tenant or provider may be able to exploit a remote code execution vulnerability to gain access to the server.
CVSS Score: 7.2 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2022-0013.html; https://www.vmware.com/security/advisories/VMSA-2022-0013.html
CVE: CVE-2022-22968
Published: 2022-04-14
Description: In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-178
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://tanzu.vmware.com/security/cve-2022-22968; https://www.oracle.com/security-alerts/cpujul2022.html
CVE: CVE-2022-27848
Published: 2022-04-14
Description: Authenticated (admin+ user) Stored Cross-Site Scripting (XSS) in Modern Events Calendar Lite (WordPress plugin) <= 6.5.1
CVSS Score: 3.4 (LOW)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/modern-events-calendar-lite/wordpress-modern-events-calendar-lite-plugin-6-5-1-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/modern-events-calendar-lite/#developers; https://patchstack.com/database/vulnerability/modern-events-calendar-lite/wordpress-modern-events-calendar-lite-plugin-6-5-1-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-24824
Published: 2022-04-14
Description: Discourse is an open source platform for community discussion. In affected versions an attacker can poison the cache for anonymous (i.e. not logged in) users, such that the users are shown the crawler view of the site instead of the HTML page. This can lead to a partial denial-of-service. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-829
References: https://github.com/discourse/discourse/commit/b72b0dac10493d09f4f9eb8f3c3ce7817295e34e; https://github.com/discourse/discourse/security/advisories/GHSA-46v9-3jc4-f53w; https://github.com/discourse/discourse/commit/b72b0dac10493d09f4f9eb8f3c3ce7817295e34e
CVE: CVE-2022-24846
Published: 2022-04-14
Description: GeoWebCache is a tile caching server implemented in Java. The GeoWebCache disk quota mechanism can perform an unchecked JNDI lookup, which in turn can be used to perform class deserialization and result in arbitrary code execution. While in GeoWebCache the JNDI strings are provided via local configuration file, in GeoServer a user interface is provided to perform the same, that can be accessed remotely, and requires admin-level login to be used. These lookup are unrestricted in scope and can lead to code execution. The lookups are going to be restricted in GeoWebCache 1.21.0, 1.20.2, 1.19.3.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-502
References: https://github.com/GeoWebCache/geowebcache/security/advisories/GHSA-4v22-v8jp-438r; https://github.com/GeoWebCache/geowebcache/security/advisories/GHSA-4v22-v8jp-438r
CVE: CVE-2022-24849
Published: 2022-04-14
Description: DisCatSharp is a Discord API wrapper for .NET. Users of versions 9.8.5, 9.8.6, 9.9.0 and previously published prereleases of 10.0.0 who have used either one of the two `RequireDisCatSharpDeveloperAttribute`s or the `BaseDiscordClient.LibraryDeveloperTeam` have potentially had their bot token sent to a web server not affiliated with Discord. This server is owned and operated by DisCatSharp's development team. The tokens were not logged, yet it is still advisable to reset the tokens of potentially affected bots. 9.9.1 has been released to patch the issue for the current stable release and the current 10.0.0 prereleases are also no longer affected. Users unable to upgrade should remove all uses of the two `RequireDisCatSharpDeveloperAttribute`s and all direct calls to `BaseDiscordClient.LibraryDeveloperTeam`.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/Aiko-IT-Systems/DisCatSharp/security/advisories/GHSA-frxg-hf44-q765; https://github.com/Aiko-IT-Systems/DisCatSharp/security/advisories/GHSA-frxg-hf44-q765
CVE: CVE-2022-24850
Published: 2022-04-14
Description: Discourse is an open source platform for community discussion. A category's group permissions settings can be viewed by anyone that has access to the category. As a result, a normal user is able to see whether a group has read/write permissions in the category even though the information should only be available to the users that can manage a category. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. There are no workarounds for this problem.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/discourse/discourse/security/advisories/GHSA-34xr-ff4w-mcpf; https://github.com/discourse/discourse/security/advisories/GHSA-34xr-ff4w-mcpf
CVE: CVE-2022-24853
Published: 2022-04-14
Description: Metabase is an open source business intelligence and analytics application. Metabase has a proxy to load arbitrary URLs for JSON maps as part of our GeoJSON support. While we do validation to not return contents of arbitrary URLs, there is a case where a particularly crafted request could result in file access on windows, which allows enabling an `NTLM relay attack`, potentially allowing an attacker to receive the system password hash. If you use Windows and are on this version of Metabase, please upgrade immediately. The following patches (or greater versions) are available: 0.42.4 and 1.42.4, 0.41.7 and 1.41.7, 0.40.8 and 1.40.8.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/metabase/metabase/security/advisories/GHSA-5cfq-582c-c38m; https://secure77.de/metabase-ntlm-relay-attack/; https://www.qomplx.com/qomplx-knowledge-ntlm-relay-attacks-explained/
CVE: CVE-2022-24854
Published: 2022-04-14
Description: Metabase is an open source business intelligence and analytics application. SQLite has an FDW-like feature called `ATTACH DATABASE`, which allows connecting multiple SQLite databases via the initial connection. If the attacker has SQL permissions to at least one SQLite database, then it can attach this database to a second database, and then it can query across all the tables. To be able to do that the attacker also needs to know the file path to the second database. Users are advised to upgrade as soon as possible. If you're unable to upgrade, you can modify your SQLIte connection strings to contain the url argument `?limit_attached=0`, which will disallow making connections to other SQLite databases. Only users making use of SQLite are affected.
CVSS Score: 8.0 (HIGH)
CWE: CWE-610
References: https://github.com/metabase/metabase/security/advisories/GHSA-vm79-xvmp-7329; https://www.sqlite.org/lang_attach.html; https://github.com/metabase/metabase/security/advisories/GHSA-vm79-xvmp-7329
CVE: CVE-2022-24855
Published: 2022-04-14
Description: Metabase is an open source business intelligence and analytics application. In affected versions Metabase ships with an internal development endpoint `/_internal` that can allow for cross site scripting (XSS) attacks, potentially leading to phishing attempts with malicious links that could lead to account takeover. Users are advised to either upgrade immediately, or block access in your firewall to `/_internal` endpoints for Metabase. The following patches (or greater versions) are available: 0.42.4 and 1.42.4, 0.41.7 and 1.41.7, 0.40.8 and 1.40.8.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://github.com/metabase/metabase/releases/tag/v0.42.4; https://github.com/metabase/metabase/security/advisories/GHSA-wjw6-wm9w-7ggr; https://github.com/metabase/metabase/releases/tag/v0.42.4
CVE: CVE-2022-26034
Published: 2022-04-15
Description: Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to R6.09.00, CENTUM VP Basic R6.01.10 to R6.09.00, and B/M9000 VP R8.01.01 to R8.03.01 allows an attacker to use the functions provided by AD server. This may lead to leakage or tampering of data managed by AD server.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://jvn.jp/vu/JVNVU99204686/index.html; https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/; https://jvn.jp/vu/JVNVU99204686/index.html
CVE: CVE-2022-27188
Published: 2022-04-15
Description: OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/vu/JVNVU99204686/index.html; https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/; https://jvn.jp/vu/JVNVU99204686/index.html
CVE: CVE-2021-40386
Published: 2022-04-15
Description: Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
References: https://csirt.divd.nl/cves/CVE-2021-40386/; https://csirt.divd.nl/cves/CVE-2021-40386/
CVE: CVE-2022-26498
Published: 2022-04-15
Description: An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not certificates. These files could be much larger than what one would expect to download, leading to Resource Exhaustion. This is fixed in 16.25.2, 18.11.2, and 19.3.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://packetstormsecurity.com/files/166744/Asterisk-Project-Security-Advisory-AST-2022-001.html; http://packetstormsecurity.com/files/172139/Shannon-Baseband-chatroom-SDP-Attribute-Memory-Corruption.html; https://downloads.asterisk.org/pub/security/
CVE: CVE-2022-26499
Published: 2022-04-15
Description: An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests (such as GET) to interfaces such as localhost by using the Identity header. This is fixed in 16.25.2, 18.11.2, and 19.3.2.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: http://packetstormsecurity.com/files/166745/Asterisk-Project-Security-Advisory-AST-2022-002.html; https://downloads.asterisk.org/pub/security/; https://downloads.asterisk.org/pub/security/AST-2022-002.html
CVE: CVE-2022-26651
Published: 2022-04-15
Description: An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provides possibly inadequate escaping functionality for backslash characters in SQL queries, resulting in user-provided data creating a broken SQL query or possibly a SQL injection. This is fixed in 16.25.2, 18.11.2, and 19.3.2, and 16.8-cert14.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/166746/Asterisk-Project-Security-Advisory-AST-2022-003.html; https://downloads.asterisk.org/pub/security/; https://downloads.asterisk.org/pub/security/AST-2022-003.html
CVE: CVE-2022-28345
Published: 2022-04-15
Description: The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded URLs beginning with a non-breaking space, when there is a hash character in the URL. This technique allows a remote unauthenticated attacker to send legitimate looking links, appearing to be any website URL, by abusing the non-http/non-https automatic rendering of URLs. An attacker can spoof, for example, example.com, and masquerade any URL with a malicious destination. An attacker requires a subdomain such as gepj, txt, fdp, or xcod, which would appear backwards as jpeg, txt, pdf, and docx respectively.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://blog.malwarebytes.com/social-engineering/2022/03/uri-spoofing-flaw-could-phish-whatsapp-signal-instagram-and-imessage-users/; https://github.com/sickcodes/security/blob/master/advisories/SICK-2022-42.md; https://github.com/zadewg/RIUS
CVE: CVE-2022-28868
Published: 2022-04-15
Description: An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted malicious webpage/URL, user may be tricked for a short period of time (until the page loads) to think content may be coming from a valid domain, while the content comes from the attacker controlled site.
CVSS Score: 4.3 (MEDIUM)
References: https://www.f-secure.com/en/home/support/security-advisories; https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28868; https://www.f-secure.com/en/home/support/security-advisories
CVE: CVE-2022-28869
Published: 2022-04-15
Description: A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number.
CVSS Score: 4.3 (MEDIUM)
References: https://www.f-secure.com/en/home/support/security-advisories; https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28869; https://www.f-secure.com/en/home/support/security-advisories
CVE: CVE-2022-28870
Published: 2022-04-15
Description: A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails.
CVSS Score: 4.3 (MEDIUM)
References: https://www.f-secure.com/en/home/support/security-advisories; https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28870; https://www.f-secure.com/en/home/support/security-advisories
CVE: CVE-2022-27474
Published: 2022-04-15
Description: SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.
CVSS Score: 7.2 (HIGH)
References: https://github.com/Mount4in/Mount4in.github.io/blob/master/poc.py; https://github.com/Mount4in/Mount4in.github.io/blob/master/suitecrm.docx; https://github.com/Mount4in/Mount4in.github.io/blob/master/poc.py
CVE: CVE-2022-28041
Published: 2022-04-15
Description: stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/nothings/stb/issues/1292; https://github.com/nothings/stb/pull/1297; https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html
CVE: CVE-2022-28042
Published: 2022-04-15
Description: stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://github.com/nothings/stb/issues/1289; https://github.com/nothings/stb/pull/1297; https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html
CVE: CVE-2022-28044
Published: 2022-04-15
Description: Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/ckolivas/lrzip/commit/5faf80cd53ecfd16b636d653483144cd12004f46; https://github.com/ckolivas/lrzip/issues/216; https://lists.debian.org/debian-lts-announce/2022/05/msg00016.html
CVE: CVE-2022-28048
Published: 2022-04-15
Description: STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.
CVSS Score: 8.8 (HIGH)
CWE: CWE-682
References: https://github.com/nothings/stb/issues/1293; https://github.com/nothings/stb/pull/1297; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FXLM5XL77SNH4IPTSXOQD7XL4E2EMIN/
CVE: CVE-2022-28049
Published: 2022-04-15
Description: NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/nginx/njs/commit/f65981b0b8fcf02d69a40bc934803c25c9f607ab; https://github.com/nginx/njs/issues/473; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-1231
Published: 2022-04-15
Description: XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code execution for example in desktop applications. Web based applications are the ones most affected. Since the SVG format allows clickable links in diagrams, it is commonly used in plugins for web based projects (like the Confluence plugin, etc. see https://plantuml.com/de/running).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/plantuml/plantuml/commit/c9137be051ce98b3e3e27f65f54ec7d9f8886903; https://huntr.dev/bounties/27db9509-6cd3-4148-8d70-5942f3837604; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EO26WBHQRMWTS44M5VLZJIJZOIGJYL3A/
CVE: CVE-2022-20622
Published: 2022-04-15
Description: A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device may experience a performance degradation in traffic processing or high CPU usage prior to the unexpected reload. This vulnerability is due to improper rate limiting of IP packets to the management interface. An attacker could exploit this vulnerability by sending a steady stream of IP traffic at a high rate to the management interface of the affected device. A successful exploit could allow the attacker to cause the device to reload.
CVSS Score: 8.6 (HIGH)
CWE: CWE-770, CWE-770
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ip-flood-dos-6hxxENVQ; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-ip-flood-dos-6hxxENVQ
CVE: CVE-2022-20661
Published: 2022-04-15
Description: Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-1221, CWE-665
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdb-cmicr-vulns-KJjFtNb; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdb-cmicr-vulns-KJjFtNb
CVE: CVE-2022-20676
Published: 2022-04-15
Description: A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl interpreter. An attacker could exploit this vulnerability by loading malicious Tcl code on an affected device. A successful exploit could allow the attacker to execute arbitrary commands as root. By default, Tcl shell access requires privilege level 15.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-250, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-priv-esc-grbtubU; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-priv-esc-grbtubU