deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-34410
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34411
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34412
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34413
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34414
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34415
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34416
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34417
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34418
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34419
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34420
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34421
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2022-34422
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2023-1429
Published: 2023-03-16
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/7588c336edb[PII_REDACTED]1b89d69e69cc9feb5f5; https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f; https://github.com/pimcore/pimcore/commit/7588c336edb[PII_REDACTED]1b89d69e69cc9feb5f5
CVE: CVE-2023-24671
Published: 2023-03-16
Description: VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae; https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html; https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae
CVE: CVE-2022-26080
Published: 2023-03-16
Description: Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-330, CWE-330
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.256[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]751217; https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.256[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]751217
CVE: CVE-2022-34423
Published: 2023-03-16
Description: 
Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability; https://www.dell.com/support/kbdoc/en-us/000206296/dsa-2022-204-dell-poweredge-improper-smm-communication-buffer-verification-vulnerability
CVE: CVE-2023-1431
Published: 2023-03-16
Description: The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location (/wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/). This makes it possible for unauthenticated attackers to view information that should be limited to administrators only and can include data like first name, last name, email, address, IP Address, and more.
CVSS Score: 5.3 (MEDIUM)
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2878855%40wordpress-simple-paypal-shopping-cart&new=2878855%40wordpress-simple-paypal-shopping-cart&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/ea4453bc-557b-4abf-85c6-4aecfd8f4012?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2878855%40wordpress-simple-paypal-shopping-cart&new=2878855%40wordpress-simple-paypal-shopping-cart&sfp_email=&sfph_mail=
CVE: CVE-2023-1432
Published: 2023-03-16
Description: A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be launched remotely. VDB-223214 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://vuldb.com/?ctiid.223214; https://vuldb.com/?id.223214; https://vuldb.com/?ctiid.223214
CVE: CVE-2023-1433
Published: 2023-03-16
Description: A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/products/controller.php?action=add of the component Products Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223215.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://github.com/zhengjiashengbaba/bug_report/blob/main/UPLOAD.md; https://vuldb.com/?ctiid.223215; https://vuldb.com/?id.223215
CVE: CVE-2023-27250
Published: 2023-03-16
Description: Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/iknownt/bug_report/blob/main/vendors/itsourcecode.com/Online-Book-Store-Project/sql_injection.md; https://github.com/iknownt/bug_report/blob/main/vendors/itsourcecode.com/Online-Book-Store-Project/sql_injection.md
CVE: CVE-2023-27875
Published: 2023-03-16
Description: IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls.  IBM X-Force ID:  249847.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/249847; https://www.ibm.com/support/pages/node/6963662; https://exchange.xforce.ibmcloud.com/vulnerabilities/249847
CVE: CVE-2020-19947
Published: 2023-03-16
Description: Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of the webpage.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/georgeOsdDev/markdown-edit/issues/12; https://github.com/georgeOsdDev/markdown-edit/issues/12
CVE: CVE-2020-22647
Published: 2023-03-16
Description: An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-668, CWE-668
References: https://github.com/Messi-Q/CVE-Application/blob/master/DepositGame-reentrancy/README.md; https://github.com/Messi-Q/CVE-Application/blob/master/DepositGame-reentrancy/README.md
CVE: CVE-2021-31637
Published: 2023-03-16
Description: An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://gist.github.com/purabparihar/d1401e59f9e699e71e3d700cc99e02a6; https://gist.github.com/purabparihar/d1401e59f9e699e71e3d700cc99e02a6
CVE: CVE-2021-36821
Published: 2023-03-16
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPMU DEV Forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.14.11.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/forminator/wordpress-forminator-plugin-1-14-11-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/forminator/wordpress-forminator-plugin-1-14-11-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-26767
Published: 2023-03-16
Description: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/liblouis/liblouis/issues/1292; https://github.com/liblouis/liblouis/pull/1297; https://github.com/liblouis/liblouis/issues/1292
CVE: CVE-2023-26768
Published: 2023-03-16
Description: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/liblouis/liblouis/issues/1301; https://github.com/liblouis/liblouis/pull/1302; https://github.com/liblouis/liblouis/issues/1301
CVE: CVE-2023-26769
Published: 2023-03-16
Description: Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://loutrace.com; https://github.com/liblouis/liblouis; https://github.com/liblouis/liblouis/pull/1300
CVE: CVE-2023-27037
Published: 2023-03-16
Description: Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/dienamer/vul/blob/main/2023-01-14.md; https://github.com/dienamer/vul/blob/main/2023-01-14.md
CVE: CVE-2023-27130
Published: 2023-03-16
Description: Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied URL parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/typecho/typecho/commit/f9ede542c9052ba22a6096d8412e2f02d9de872b; https://github.com/typecho/typecho/issues/1535; https://github.com/typecho/typecho/commit/f9ede542c9052ba22a6096d8412e2f02d9de872b
CVE: CVE-2023-27131
Published: 2023-03-16
Description: Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Post Editorparameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/typecho/typecho/issues/1536; https://github.com/typecho/typecho/issues/1536
CVE: CVE-2023-27707
Published: 2023-03-16
Description: SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-group/; https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-group/
CVE: CVE-2023-27709
Published: 2023-03-16
Description: SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-story/; https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-story/
CVE: CVE-2023-27711
Published: 2023-03-16
Description: Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/typecho/typecho/issues/1539; https://srpopty.github.io/2023/03/02/Typecho-V1.2.0-Backend-Reflected-XSS-cid/; https://github.com/typecho/typecho/issues/1539
CVE: CVE-2023-27783
Published: 2023-03-16
Description: An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://github.com/appneta/tcpreplay/issues/780; https://github.com/appneta/tcpreplay/pull/781; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/
CVE: CVE-2023-27784
Published: 2023-03-16
Description: An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/appneta/tcpreplay/issues/787; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/
CVE: CVE-2023-27785
Published: 2023-03-16
Description: An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/appneta/tcpreplay/issues/785; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/
CVE: CVE-2023-27786
Published: 2023-03-16
Description: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/appneta/tcpreplay/issues/782; https://github.com/appneta/tcpreplay/pull/783; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/
CVE: CVE-2023-27787
Published: 2023-03-16
Description: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/appneta/tcpreplay/issues/788; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/
CVE: CVE-2023-27788
Published: 2023-03-16
Description: An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://github.com/appneta/tcpreplay/issues/786; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/
CVE: CVE-2023-27789
Published: 2023-03-16
Description: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://github.com/appneta/tcpreplay/issues/784; https://github.com/appneta/tcpreplay/pull/783; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/
CVE: CVE-2023-28155
Published: 2023-03-16
Description: The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-918
References: https://doyensec.com/resources/Doyensec_Advisory_RequestSSRF_Q12023.pdf; https://github.com/request/request/issues/3442; https://github.com/request/request/pull/3444