deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-28734
Published: 2023-07-20
Description: Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28734; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.openwall.com/lists/oss-security/2022/06/07/5
CVE: CVE-2022-28735
Published: 2023-07-20
Description: The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.
CVSS Score: 6.7 (MEDIUM)
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.openwall.com/lists/oss-security/2022/06/07/5
CVE: CVE-2022-28736
Published: 2023-07-20
Description: There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader more than once a use-after-free vulnerability is triggered. If an attacker can control the GRUB2's memory allocation pattern sensitive data may be exposed and arbitrary code execution can be achieved.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-416
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28736; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.openwall.com/lists/oss-security/2022/06/07/5
CVE: CVE-2022-28737
Published: 2023-07-20
Description: There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737; https://www.openwall.com/lists/oss-security/2022/06/07/5; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28737
CVE: CVE-2023-37289
Published: 2023-07-20
Description: It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in  InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. This issue affects Document On-line Submission and Approval System: 22547, 22567.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.twcert.org.tw/tw/cp-132-7225-cef32-1.html; https://www.twcert.org.tw/tw/cp-132-7225-cef32-1.html
CVE: CVE-2023-38408
Published: 2023-07-20
Description: The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-428, CWE-428
References: http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html; http://www.openwall.com/lists/oss-security/2023/07/20/1; http://www.openwall.com/lists/oss-security/2023/07/20/2
CVE: CVE-2023-3779
Published: 2023-07-20
Description: The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers to obtain a site's MailChimp API key. We recommend resetting any MailChimp API keys if running a vulnerable version of this plugin with the MailChimp block enabled as the API key may have been compromised. This only affects sites running the premium version of the plugin and that have the Mailchimp block enabled on a page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2938177%40essential-addons-for-elementor-lite&new=2938177%40essential-addons-for-elementor-lite&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/e007c713-74bc-4ff5-a198-70dcc8a8ee68?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2938177%40essential-addons-for-elementor-lite&new=2938177%40essential-addons-for-elementor-lite&sfp_email=&sfph_mail=
CVE: CVE-2021-39822
Published: 2023-07-20
Description: Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb21-73.html; https://helpx.adobe.com/security/products/indesign/apsb21-73.html
CVE: CVE-2023-3783
Published: 2023-07-20
Description: A vulnerability was found in Webile 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP POST Request Handler. The manipulation of the argument new_file_name/c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235050 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2023/Jul/38; https://vuldb.com/?ctiid.235050; https://vuldb.com/?id.235050
CVE: CVE-2023-3784
Published: 2023-07-20
Description: A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235051.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2023/Jul/37; https://vuldb.com/?ctiid.235051; https://vuldb.com/?id.235051
CVE: CVE-2023-37290
Published: 2023-07-20
Description: 
InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local resources through HTML tags such as iframe. This vulnerability allows unauthenticated remote attackers to perform Server-Side Request Forgery (SSRF) attacks, gaining unauthorized access to arbitrary system files and uncovering the internal network topology.




CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://www.twcert.org.tw/tw/cp-132-7226-12195-1.html; https://www.twcert.org.tw/tw/cp-132-7226-12195-1.html
CVE: CVE-2023-3785
Published: 2023-07-20
Description: A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument firstname/lastname/address/city/state leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235052.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2023/Jul/39; https://vuldb.com/?ctiid.235052; https://vuldb.com/?id.235052
CVE: CVE-2023-32481
Published: 2023-07-20
Description: 
Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An authenticated malicious user can flood the configured SMTP server with numerous requests in order to deny access to the system.


CVSS Score: 4.9 (MEDIUM)
CWE: CWE-770
References: https://www.dell.com/support/kbdoc/en-us/000215351/dsa-2023-240-dell-wyse-management-suite; https://www.dell.com/support/kbdoc/en-us/000215351/dsa-2023-240-dell-wyse-management-suite
CVE: CVE-2023-32482
Published: 2023-07-20
Description: 
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group.


CVSS Score: 4.9 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://www.dell.com/support/kbdoc/en-us/000215351/dsa-2023-240-dell-wyse-management-suite; https://www.dell.com/support/kbdoc/en-us/000215351/dsa-2023-240-dell-wyse-management-suite
CVE: CVE-2023-32483
Published: 2023-07-20
Description: 
Wyse Management Suite versions prior to 4.0 contain a sensitive information disclosure vulnerability. An authenticated malicious user having local access to the system running the application could exploit this vulnerability to read sensitive information written to log files.


CVSS Score: 4.4 (MEDIUM)
CWE: CWE-312
References: https://www.dell.com/support/kbdoc/en-us/000215351/dsa-2023-240-dell-wyse-management-suite; https://www.dell.com/support/kbdoc/en-us/000215351/dsa-2023-240-dell-wyse-management-suite
CVE: CVE-2023-32446
Published: 2023-07-20
Description: 
Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-532
References: https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-247; https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-247
CVE: CVE-2023-32447
Published: 2023-07-20
Description: 
Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-532
References: https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-247; https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-247
CVE: CVE-2023-32455
Published: 2023-07-20
Description: 
Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-532
References: https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-247; https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-247
CVE: CVE-2023-3786
Published: 2023-07-20
Description: A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The identifier VDB-235053 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://seclists.org/fulldisclosure/2023/Jul/40; https://vuldb.com/?ctiid.235053; https://vuldb.com/?id.235053
CVE: CVE-2023-32265
Published: 2023-07-20
Description: 
A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server.
An attacker would need to be authenticated into ESCWA to attempt to exploit this vulnerability. As described in the hardening guide in the product documentation, other mitigations including restricting network access to ESCWA and restricting usersâ€™ permissions in the Micro Focus Directory Server also reduce the exposure to this issue.

Given the right conditions this vulnerability could be exploited to expose a service account password. The account corresponding to the exposed credentials usually has limited privileges and, in many cases would only be useful for extracting details of other user accounts and similar information.


CVSS Score: 7.1 (HIGH)
References: https://portal.microfocus.com/s/article/KM000019323?language=en_US; https://portal.microfocus.com/s/article/KM000019323?language=en_US
CVE: CVE-2023-32476
Published: 2023-07-20
Description: 
Dell Hybrid Client version 2.0 contains a Sensitive Data Exposure vulnerability. An unauthenticated malicious user on the device can access hard coded secrets in javascript files.


CVSS Score: 6.4 (MEDIUM)
CWE: CWE-200
References: https://www.dell.com/support/kbdoc/en-us/000215862/dsa-2023-258-dell; https://www.dell.com/support/kbdoc/en-us/000215862/dsa-2023-258-dell
CVE: CVE-2022-2127
Published: 2023-07-20
Description: An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/errata/RHSA-2023:6667; https://access.redhat.com/errata/RHSA-2023:7139; https://access.redhat.com/errata/RHSA-2024:0423
CVE: CVE-2023-34966
Published: 2023-07-20
Description: An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a denial of service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://access.redhat.com/errata/RHSA-2023:6667; https://access.redhat.com/errata/RHSA-2023:7139; https://access.redhat.com/errata/RHSA-2024:0423
CVE: CVE-2023-34967
Published: 2023-07-20
Description: A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker process, affecting all other clients this worker serves.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://access.redhat.com/errata/RHSA-2023:6667; https://access.redhat.com/errata/RHSA-2023:7139; https://access.redhat.com/errata/RHSA-2024:0423
CVE: CVE-2023-34968
Published: 2023-07-20
Description: A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-201
References: https://access.redhat.com/errata/RHSA-2023:6667; https://access.redhat.com/errata/RHSA-2023:7139; https://access.redhat.com/errata/RHSA-2024:0423
CVE: CVE-2023-3347
Published: 2023-07-20
Description: A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347, CWE-924
References: https://access.redhat.com/errata/RHSA-2023:4325; https://access.redhat.com/errata/RHSA-2023:4328; https://access.redhat.com/security/cve/CVE-2023-3347
CVE: CVE-2023-3787
Published: 2023-07-20
Description: A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4. This vulnerability affects unknown code. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235054 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2023/Jul/35; https://vuldb.com/?ctiid.235054; https://vuldb.com/?id.235054
CVE: CVE-2023-38203
Published: 2023-07-20
Description: Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html; https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38203
CVE: CVE-2023-3788
Published: 2023-07-20
Description: A vulnerability, which was classified as problematic, has been found in ActiveITzone Active Super Shop CMS 2.5. This issue affects some unknown processing of the component Manage Details Page. The manipulation of the argument name/phone/address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235055.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2023/Jul/34; https://vuldb.com/?ctiid.235055; https://vuldb.com/?id.235055
CVE: CVE-2023-3789
Published: 2023-07-20
Description: A vulnerability, which was classified as problematic, was found in PaulPrinting CMS 2018. Affected is an unknown function of the file /account/delivery of the component Search. The manipulation of the argument s leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235056.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2023/Jul/36; https://vuldb.com/?ctiid.235056; https://vuldb.com/?id.235056
CVE: CVE-2023-37471
Published: 2023-07-20
Description: Open Access Management (OpenAM) is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security. OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses received as part of the SAMLv1.x Single Sign-On process. Attackers can use this fact to impersonate any OpenAM user, including the administrator, by sending a specially crafted SAML response to the SAMLPOSTProfileServlet servlet. This problem has been patched in  OpenAM 14.7.3-SNAPSHOT and later. User unable to upgrade should comment servlet `SAMLPOSTProfileServlet` from their pom file. See the linked GHSA for details.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://github.com/OpenIdentityPlatform/OpenAM/commit/7c18543d126e8a567b83bb[PII_REDACTED]aaa9d742; https://github.com/OpenIdentityPlatform/OpenAM/pull/624; https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-4mh8-9wq6-rjxg
CVE: CVE-2023-3790
Published: 2023-07-20
Description: A vulnerability has been found in Boom CMS 8.0.7 and classified as problematic. Affected by this vulnerability is the function add of the component assets-manager. The manipulation of the argument title/description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235057 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2023/Jul/33; https://vuldb.com/?ctiid.235057; https://vuldb.com/?id.235057
CVE: CVE-2021-45094
Published: 2023-07-20
Description: Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3[PII_REDACTED]08 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://aegis9.com.au/blog/; https://www.aegis9.com.au/blog/5/; https://www.imprivata.com/privileged-access-management
CVE: CVE-2023-31461
Published: 2023-07-20
Description: Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://steelseries.com/gg; https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation; https://steelseries.com/gg
CVE: CVE-2023-31462
Published: 2023-07-20
Description: An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://steelseries.com/gg; https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation; https://steelseries.com/gg
CVE: CVE-2023-37728
Published: 2023-07-20
Description: IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://icearp.com; http://icewarp.com; https://medium.com/%40ayush.engr29/cve-2023-37728-6dfb7586311
CVE: CVE-2023-38334
Published: 2023-07-20
Description: Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis libraries can be unlocked, and thus further analyzed and modified by Omnis Studio. This allows for further analyzing and also deleting, viewing, changing, copying, renaming, duplicating, or printing previously locked Omnis classes. This violates the expected behavior of an "irreversible operation."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: http://packetstormsecurity.com/files/173696/Omnis-Studio-10.22.00-Library-Unlock.html; http://seclists.org/fulldisclosure/2023/Jul/42; http://seclists.org/fulldisclosure/2023/Jul/43