deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-46125
Published: 2022-12-14
Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-10.md; https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-10.md
CVE: CVE-2022-46126
Published: 2022-12-14
Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-8.md; https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-8.md
CVE: CVE-2022-46127
Published: 2022-12-14
Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-11.md; https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-11.md
CVE: CVE-2022-23520
Published: 2022-12-14
Description: rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, there is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer due to an incomplete fix of CVE-2022-32209. Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both "select" and "style" elements. Code is only impacted if allowed tags are being overridden. This issue is patched in version 1.4.4. All users overriding the allowed tags to include both "select" and "style" should either upgrade or use this workaround: Remove either "select" or "style" from the overridden allowed tags. NOTE: Code is _not_ impacted if allowed tags are overridden using either the :tags option to the Action View helper method sanitize or the :tags option to the instance method SafeListSanitizer#sanitize.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8; https://hackerone.com/reports/1654310; https://lists.debian.org/debian-lts-announce/2023/09/msg00012.html
CVE: CVE-2022-23527
Published: 2022-12-14
Description: mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulnerable to Open Redirect. When providing a logout parameter to the redirect URI, the existing code in oidc_validate_redirect_url() does not properly check for URLs that start with /\t, leading to an open redirect. This issue has been patched in version 2.4.12.2. Users unable to upgrade can mitigate the issue by configuring mod_auth_openidc to only allow redirection when the destination matches a given regular expression with OIDCRedirectURLsAllowed.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/zmartzone/mod_auth_openidc/blob/v2.4.12.1/auth_openidc.conf#L975-L984; https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-q6f2-285m-gr53; https://lists.debian.org/debian-lts-announce/2023/07/msg00020.html
CVE: CVE-2022-44910
Published: 2022-12-14
Description: Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-122
References: https://github.com/yangfar/CVE/blob/main/Reference%20of%20Binbloom.md; https://github.com/yangfar/CVE/blob/main/Reference%20of%20Binbloom.md
CVE: CVE-2022-46071
Published: 2022-12-14
Description: There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.youtube.com/watch?v=5wit1Arzwxs&feature=youtu.be; https://yuyudhn.github.io/CVE-2022-46071/; https://www.youtube.com/watch?v=5wit1Arzwxs&feature=youtu.be
CVE: CVE-2022-46072
Published: 2022-12-14
Description: Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.youtube.com/watch?v=jBAVUSzBL_M&ab_channel=IkariShinji; https://yuyudhn.github.io/CVE-2022-46072/; https://www.youtube.com/watch?v=jBAVUSzBL_M&ab_channel=IkariShinji
CVE: CVE-2022-46255
Published: 2022-12-14
Description: An improper limitation of a pathname to a restricted directory vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. A check was added within Pages to ensure the working directory is clean before unpacking new content to prevent an arbitrary file overwrite bug. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1; https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1
CVE: CVE-2022-46256
Published: 2022-12-14
Description: A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the instance. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5 and 3.7.2. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22, CWE-22
References: https://docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.17; https://docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.12; https://docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.9
CVE: CVE-2022-46443
Published: 2022-12-14
Description: mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.youtube.com/watch?v=Dmjk6uOU8vY; https://yuyudhn.github.io/CVE-2022-46443/; https://www.youtube.com/watch?v=Dmjk6uOU8vY
CVE: CVE-2022-23741
Published: 2022-12-14
Description: An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full admin/owner privileges. An attacker would require an account with admin access to install a malicious GitHub App. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, and 3.6.5. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 7.2 (HIGH)
CWE: CWE-863, CWE-863
References: https://docs.github.com/en/enterprise-server%403.3/admin/release-notes#3.3.17; https://docs.github.com/en/enterprise-server%403.4/admin/release-notes#3.4.12; https://docs.github.com/en/enterprise-server%403.5/admin/release-notes#3.5.9
CVE: CVE-2022-31700
Published: 2022-12-14
Description: VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2.
CVSS Score: 7.2 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2022-0032.html; https://www.vmware.com/security/advisories/VMSA-2022-0032.html
CVE: CVE-2022-31701
Published: 2022-12-14
Description: VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://www.vmware.com/security/advisories/VMSA-2022-0032.html; https://www.vmware.com/security/advisories/VMSA-2022-0032.html
CVE: CVE-2022-31702
Published: 2022-12-14
Description: vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the vRNI REST API can execute commands without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.vmware.com/security/advisories/VMSA-2022-0031.html; https://www.vmware.com/security/advisories/VMSA-2022-0031.html
CVE: CVE-2022-31703
Published: 2022-12-14
Description: The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.vmware.com/security/advisories/VMSA-2023-0001.html; https://www.vmware.com/security/advisories/VMSA-2023-0001.html
CVE: CVE-2022-31705
Published: 2022-12-14
Description: VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.vmware.com/security/advisories/VMSA-2022-0033.html; https://www.vmware.com/security/advisories/VMSA-2022-0033.html
CVE: CVE-2022-2601
Published: 2022-12-14
Description: A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.
CVSS Score: 8.6 (HIGH)
CWE: CWE-122
References: https://bugzilla.redhat.com/show_bug.cgi?id=2112975#c0; https://security.gentoo.org/glsa/202311-14; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-38488
Published: 2022-12-14
Description: logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://archive.ph/PecmD; https://archive.ph/VlGDa; https://blog.logrocket.com/implement-oauth-2-0-node-js/
CVE: CVE-2022-3104
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc() and will cause the null pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153062; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=4a9800c81d2f34afb66b4b42e0330ae8298019a2; https://bugzilla.redhat.com/show_bug.cgi?id=2153062
CVE: CVE-2022-3105
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153067; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=7694a7de22c53a312ea98960fcafc6ec62046531; https://bugzilla.redhat.com/show_bug.cgi?id=2153067
CVE: CVE-2022-3106
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153066; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=407ecd1bd726f240123f704620d46e285ff30dd9; https://bugzilla.redhat.com/show_bug.cgi?id=2153066
CVE: CVE-2022-3107
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153060; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=886e44c9298a6b428ae046e2fa092ca52e822e6a; https://bugzilla.redhat.com/show_bug.cgi?id=2153060
CVE: CVE-2022-3108
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252, CWE-252
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153052; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=abfaf0eee97925905e742aa3b0b72e04a918fa9e; https://bugzilla.redhat.com/show_bug.cgi?id=2153052
CVE: CVE-2022-3110
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c lacks check of the return value of rtw_alloc_hwxmits() and will cause the null pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153055; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=f94b47c6bde624d6c07f[PII_REDACTED]7c52054a95; https://bugzilla.redhat.com/show_bug.cgi?id=2153055
CVE: CVE-2022-3111
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_FAST_RDY, which is registered in wm8350_init_charger().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153059; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=6dee930f6f6776d1e5a7edf542c6863b47d9f078; https://bugzilla.redhat.com/show_bug.cgi?id=2153059
CVE: CVE-2022-3112
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153068; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=c8c80c996182239ff9b05eda4db50184cf3b2e99; https://bugzilla.redhat.com/show_bug.cgi?id=2153068
CVE: CVE-2022-3113
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153053; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=e25a89f743b18c029bfbe5e1663ae0c7190912b0; https://bugzilla.redhat.com/show_bug.cgi?id=2153053
CVE: CVE-2022-3114
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153054; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=ed713e2bc093239ccd380c2ce8ae9e4162f5c037; https://bugzilla.redhat.com/show_bug.cgi?id=2153054
CVE: CVE-2022-3115
Published: 2022-12-14
Description: An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2153058; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=73c3ed7495c67b8fbdc31cf58e6ca8757df31a33; https://bugzilla.redhat.com/show_bug.cgi?id=2153058
CVE: CVE-2022-46340
Published: 2022-12-14
Description: A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://access.redhat.com/security/cve/CVE-2022-46340; https://bugzilla.redhat.com/show_bug.cgi?id=2151755; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/
CVE: CVE-2022-46341
Published: 2022-12-14
Description: A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://access.redhat.com/security/cve/CVE-2022-46341; https://bugzilla.redhat.com/show_bug.cgi?id=2151756; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/
CVE: CVE-2022-46342
Published: 2022-12-14
Description: A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2022-46342; https://bugzilla.redhat.com/show_bug.cgi?id=2151757; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/
CVE: CVE-2022-46343
Published: 2022-12-14
Description: A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2022-46343; https://bugzilla.redhat.com/show_bug.cgi?id=2151758; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/
CVE: CVE-2022-46344
Published: 2022-12-14
Description: A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2023/12/13/1; https://access.redhat.com/security/cve/CVE-2022-46344; https://bugzilla.redhat.com/show_bug.cgi?id=2151760
CVE: CVE-2022-47406
Published: 2022-12-14
Description: An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3. The extension fails to revoke existing sessions for the current user when the password has been changed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-016; https://typo3.org/security/advisory/typo3-ext-sa-2022-016
CVE: CVE-2022-47407
Published: 2022-12-14
Description: An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-018; https://typo3.org/security/advisory/typo3-ext-sa-2022-018
CVE: CVE-2022-47408
Published: 2022-12-14
Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-017; https://typo3.org/security/advisory/typo3-ext-sa-2022-017
CVE: CVE-2022-47409
Published: 2022-12-14
Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Attackers can unsubscribe everyone via a series of modified subscription UIDs in deleteAction operations.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-285
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-017; https://typo3.org/security/advisory/typo3-ext-sa-2022-017
CVE: CVE-2022-47410
Published: 2022-12-14
Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-017; https://typo3.org/security/advisory/typo3-ext-sa-2022-017
CVE: CVE-2022-47411
Published: 2022-12-14
Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-017; https://typo3.org/security/advisory/typo3-ext-sa-2022-017
CVE: CVE-2022-4283
Published: 2022-12-14
Description: A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2022-4283; https://bugzilla.redhat.com/show_bug.cgi?id=2151761; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NELB7YDWRABYYBG4UPTHRBDTKJRV5M2/