deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-1627
Published: 2022-06-27
Description: The My Private Site WordPress plugin before 3.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/70ce3654-8fd9-4c33-b594-fac13ec26137; https://wpscan.com/vulnerability/70ce3654-8fd9-4c33-b594-fac13ec26137
CVE: CVE-2022-1653
Published: 2022-06-27
Description: The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, allowing an attacker to trick any logged in user to manipulate or change the plugin settings, as well as create, delete and rename projects and networks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/52eff451-8ce3-4ac4-b530-3196aa82db48; https://wpscan.com/vulnerability/52eff451-8ce3-4ac4-b530-3196aa82db48
CVE: CVE-2022-1776
Published: 2022-06-27
Description: The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.1.8 does not sanitize and escape some campaign parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/46ed56db-9b9d-4390-80fc-343a01fcc3c9; https://wpscan.com/vulnerability/46ed56db-9b9d-4390-80fc-343a01fcc3c9
CVE: CVE-2022-1842
Published: 2022-06-27
Description: The OpenBook Book Data WordPress plugin through 3.5.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/77aafeb9-af80-490a-b3d7-4fa973bab61c; https://wpscan.com/vulnerability/77aafeb9-af80-490a-b3d7-4fa973bab61c
CVE: CVE-2022-1843
Published: 2022-06-27
Description: The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/aa59f811-2375-4593-93d4-f587f9870ed1; https://wpscan.com/vulnerability/aa59f811-2375-4593-93d4-f587f9870ed1
CVE: CVE-2022-1844
Published: 2022-06-27
Description: The WP Sentry WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/f0b0baac-7f44-44e1-af73-5a72b967858d; https://wpscan.com/vulnerability/f0b0baac-7f44-44e1-af73-5a72b967858d
CVE: CVE-2022-1845
Published: 2022-06-27
Description: The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attackers to make a logged in admin delete plugin's data, update the settings, add new entries and more via CSRF attacks
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/6ee3e9e2-ff57-41c4-8cc5-b258801a8a02; https://wpscan.com/vulnerability/6ee3e9e2-ff57-41c4-8cc5-b258801a8a02
CVE: CVE-2022-1846
Published: 2022-06-27
Description: The Tiny Contact Form WordPress plugin through 0.7 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/5fa5838e-4843-4d9c-9884-e3ebbf56fc6a; https://wpscan.com/vulnerability/5fa5838e-4843-4d9c-9884-e3ebbf56fc6a
CVE: CVE-2022-1847
Published: 2022-06-27
Description: The Rotating Posts WordPress plugin through 1.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/d34ed713-4cca-4cef-b431-f132f1b10aa6; https://wpscan.com/vulnerability/d34ed713-4cca-4cef-b431-f132f1b10aa6
CVE: CVE-2022-1885
Published: 2022-06-27
Description: The Cimy Header Image Rotator WordPress plugin through 6.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/8416cbcf-086d-42ff-b2a4-f3954c8ff0c8; https://wpscan.com/vulnerability/8416cbcf-086d-42ff-b2a4-f3954c8ff0c8
CVE: CVE-2022-1903
Published: 2022-06-27
Description: The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://wpscan.com/vulnerability/28d26aa6-a8db-4c20-9ec7-39821c606a08; https://wpscan.com/vulnerability/28d26aa6-a8db-4c20-9ec7-39821c606a08
CVE: CVE-2022-1904
Published: 2022-06-27
Description: The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/92215d07-d129-49b4-a838-0de1a944c06b; https://wpscan.com/vulnerability/92215d07-d129-49b4-a838-0de1a944c06b
CVE: CVE-2022-1913
Published: 2022-06-27
Description: The Add Post URL WordPress plugin through 2.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/2cafef43-e64a-4897-8c41-f0ed473d7ead; https://wpscan.com/vulnerability/2cafef43-e64a-4897-8c41-f0ed473d7ead
CVE: CVE-2022-1914
Published: 2022-06-27
Description: The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due to the lack of sanitisation and escaping as well
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/8c8dad47-8591-47dc-b84f-8c5cb18b2d78; https://wpscan.com/vulnerability/8c8dad47-8591-47dc-b84f-8c5cb18b2d78
CVE: CVE-2022-1916
Published: 2022-06-27
Description: The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store WordPress plugin before 1.0.5 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d16a0c3d-4318-4ecd-9e65-fc4165af8808; https://wpscan.com/vulnerability/d16a0c3d-4318-4ecd-9e65-fc4165af8808
CVE: CVE-2022-1953
Published: 2022-06-27
Description: The Product Configurator for WooCommerce WordPress plugin before 1.2.32 suffers from an arbitrary file deletion vulnerability via an AJAX action, accessible to unauthenticated users, which accepts user input that is being used in a path and passed to unlink() without validation first
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://wpscan.com/vulnerability/b66d6682-edbc-435f-a73a-dced32a32770; https://wpscan.com/vulnerability/b66d6682-edbc-435f-a73a-dced32a32770
CVE: CVE-2022-1960
Published: 2022-06-27
Description: The MyCSS WordPress plugin through 1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/bc97dd57-e9f6-4bc3-a4c2-40303786ae4a; https://wpscan.com/vulnerability/bc97dd57-e9f6-4bc3-a4c2-40303786ae4a
CVE: CVE-2022-1964
Published: 2022-06-27
Description: The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/52cf7e3c-2a0c-45c4-be27-be87424f1338; https://wpscan.com/vulnerability/52cf7e3c-2a0c-45c4-be27-be87424f1338
CVE: CVE-2022-1971
Published: 2022-06-27
Description: The NextCellent Gallery WordPress plugin through 1.9.35 does not sanitise and escape some of its image settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1bffbbef-7876-43a6-9cb0-6e09bb4ff2b0; https://wpscan.com/vulnerability/1bffbbef-7876-43a6-9cb0-6e09bb4ff2b0
CVE: CVE-2022-1977
Published: 2022-06-27
Description: The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via an URL before making an HTTP request to it, which could allow high privilege users such as admin to perform Blind SSRF attacks
CVSS Score: 7.2 (HIGH)
CWE: CWE-918, CWE-918
References: https://wpscan.com/vulnerability/1b640519-75e1-48cb-944e-b9bff9de6d3d; https://wpscan.com/vulnerability/1b640519-75e1-48cb-944e-b9bff9de6d3d
CVE: CVE-2022-1990
Published: 2022-06-27
Description: The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/42f1bf1f-95a8-41ee-a637-88deb80ab870; https://wpscan.com/vulnerability/42f1bf1f-95a8-41ee-a637-88deb80ab870
CVE: CVE-2022-1994
Published: 2022-06-27
Description: The Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin before 1.0.8 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/114d94be-b567-4b4b-9a44-f2c05cdbe18e; https://wpscan.com/vulnerability/114d94be-b567-4b4b-9a44-f2c05cdbe18e
CVE: CVE-2022-1995
Published: 2022-06-27
Description: The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/62fb399d-3327-45d0-b10f-769d2d164903; https://wpscan.com/vulnerability/62fb399d-3327-45d0-b10f-769d2d164903
CVE: CVE-2022-2040
Published: 2022-06-27
Description: The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element URL, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ab53a70c-57d5-400f-b11f-b1b7b2b0cf01; https://www.fortiguard.com/zeroday/FG-VD-21-111; https://wpscan.com/vulnerability/ab53a70c-57d5-400f-b11f-b1b7b2b0cf01
CVE: CVE-2022-2041
Published: 2022-06-27
Description: The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element content, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/8edb11bc-9e8d-4a98-8538-aaff0f072109; https://www.fortiguard.com/zeroday/FG-VD-21-110; https://wpscan.com/vulnerability/8edb11bc-9e8d-4a98-8538-aaff0f072109
CVE: CVE-2021-40895
Published: 2022-06-27
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in todo-regex v0.1.1 when matching crafted invalid TODO statements.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/yetingli/SaveResults/blob/main/js/todo-regex.js; https://github.com/yetingli/SaveResults/blob/main/js/todo-regex.js
CVE: CVE-2021-40896
Published: 2022-06-27
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in that-value v0.1.3 when validating crafted invalid emails.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/yetingli/SaveResults/blob/main/js/that-value.js; https://github.com/yetingli/SaveResults/blob/main/js/that-value.js
CVE: CVE-2021-40897
Published: 2022-06-27
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in split-html-to-chars v1.0.5 when splitting crafted invalid htmls.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/yetingli/SaveResults/blob/main/js/split-html-to-chars.js; https://github.com/yetingli/SaveResults/blob/main/js/split-html-to-chars.js
CVE: CVE-2021-40898
Published: 2022-06-27
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/yetingli/SaveResults/blob/main/js/scaffold-helper.js; https://github.com/yetingli/SaveResults/blob/main/js/scaffold-helper.js
CVE: CVE-2021-40899
Published: 2022-06-27
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/yetingli/SaveResults/blob/main/js/repo-git-downloader.js; https://github.com/yetingli/SaveResults/blob/main/js/repo-git-downloader.js
CVE: CVE-2022-0722
Published: 2022-06-27
Description: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3; https://huntr.dev/bounties/2490ef6d-5577-4714-a4dd-9608251b4226; https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
CVE: CVE-2022-2217
Published: 2022-06-27
Description: Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3; https://huntr.dev/bounties/4e046c63-b1ca-4bcc-b[PII_REDACTED]8a71b; https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
CVE: CVE-2022-2207
Published: 2022-06-27
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://github.com/vim/vim/commit/0971c7a4e537ea120a6bb2195960be8d0815e97b; https://huntr.dev/bounties/05bc6051-4dc3-483b-ae56-cf23346b97b9; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
CVE: CVE-2022-2216
Published: 2022-06-27
Description: Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3; https://huntr.dev/bounties/505a3d39-2723-4a06-b1f7-9b2d133c92e1; https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
CVE: CVE-2021-40900
Published: 2022-06-27
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in regexfn v1.0.5 when validating crafted invalid emails.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/yetingli/SaveResults/blob/main/js/regexfn.js; https://github.com/yetingli/SaveResults/blob/main/js/regexfn.js
CVE: CVE-2021-40901
Published: 2022-06-27
Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in scniro-validator v1.0.1 when validating crafted invalid emails.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/yetingli/SaveResults/blob/main/js/scniro-validator.js; https://github.com/yetingli/SaveResults/blob/main/js/scniro-validator.js
CVE: CVE-2022-2208
Published: 2022-06-27
Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/vim/vim/commit/cd38bb4d83c942c4bad596835c6766cbf32e5195; https://huntr.dev/bounties/7bfe3d5b-568f-4c34-908f-a39909638cc1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
CVE: CVE-2022-2218
Published: 2022-06-27
Description: Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3; https://huntr.dev/bounties/024912d3-f103-4daf-a1d0-567f4d9f2bf5; https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
CVE: CVE-2017-20100
Published: 2022-06-27
Description: A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-80, CWE-79
References: https://vuldb.com/?id.97280; https://www.vulnerability-lab.com/get_content.php?id=2035; https://vuldb.com/?id.97280
CVE: CVE-2017-20101
Published: 2022-06-27
Description: A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.
CVSS Score: 3.5 (LOW)
CWE: CWE-200, CWE-639
References: http://seclists.org/fulldisclosure/2017/Feb/58; https://vuldb.com/?id.97275; https://youtu.be/Xc6Jg9I7Pj4
CVE: CVE-2017-20102
Published: 2022-06-27
Description: A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://vuldb.com/?id.97268; https://www.vulnerability-lab.com/get_content.php?id=2033; https://vuldb.com/?id.97268
CVE: CVE-2020-21161
Published: 2022-06-27
Description: Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://ruckus.com; http://zonedirector.com; https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html
CVE: CVE-2013-2084
Published: 2022-06-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2069. Reason: This candidate is a reservation duplicate of CVE-2013-2069. Notes: All CVE users should reference CVE-2013-2069 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-2180
Published: 2022-06-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-2210
Published: 2022-06-27
Description: Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/vim/vim/commit/c101abff4c6756db4f5e740fde289decb9452efa; https://huntr.dev/bounties/020845f8-f047-4072-af0f-3726fe1aea25; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/
CVE: CVE-2013-2216
Published: 2022-06-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-33647
Published: 2022-06-27
Description: When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-008_en.md; https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-008_en.md
CVE: CVE-2021-33648
Published: 2022-06-27
Description: When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-007_en.md; https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-007_en.md
CVE: CVE-2021-33649
Published: 2022-06-27
Description: When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_shape, it will access data outside of bounds of input_shape which allocated from heap buffers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-006_en.md; https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-006_en.md
CVE: CVE-2021-33650
Published: 2022-06-27
Description: When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data outside of bounds of inputs which allocated from heap buffers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-005_en.md; https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-005_en.md
CVE: CVE-2021-33651
Published: 2022-06-27
Description: When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it will cause a division by 0 exception.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369, CWE-369
References: https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-004_en.md; https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-004_en.md
CVE: CVE-2021-33652
Published: 2022-06-27
Description: When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it will cause a division by 0 exception.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369, CWE-369
References: https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-003_en.md; https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-003_en.md