deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-27618
Published: 2022-08-03
Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Storage Analyzer before 2.1.0-0390 allows remote authenticated users to delete arbitrary files via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://www.synology.com/security/advisory/Synology_SA_22_11; https://www.synology.com/security/advisory/Synology_SA_22_11
CVE: CVE-2022-27619
Published: 2022-08-03
Description: Cleartext transmission of sensitive information vulnerability in authentication management in Synology Note Station Client before 2.2.2-609 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-319
References: https://www.synology.com/security/advisory/Synology_SA_22_12; https://www.synology.com/security/advisory/Synology_SA_22_12
CVE: CVE-2022-27620
Published: 2022-08-03
Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology SSO Server before 2.2.3-0331 allows remote authenticated users to read arbitrary files via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.synology.com/security/advisory/Synology_SA_22_13; https://www.synology.com/security/advisory/Synology_SA_22_13
CVE: CVE-2022-36800
Published: 2022-08-03
Description: Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732
References: https://jira.atlassian.com/browse/JSDSERVER-11900; https://jira.atlassian.com/browse/JSDSERVER-11900
CVE: CVE-2022-27621
Published: 2022-08-03
Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://www.synology.com/security/advisory/Synology_SA_22_14; https://www.synology.com/security/advisory/Synology_SA_22_14
CVE: CVE-2022-35737
Published: 2022-08-03
Description: SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://blog.trailofbits.com/2022/10/25/sqlite-vulnerability-july-2022-library-api/; https://kb.cert.org/vuls/id/720344; https://security.gentoo.org/glsa/202210-40
CVE: CVE-2022-37394
Published: 2022-08-03
Description: An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnic_type, creating an instance bound to that port, and then changing the vnic_type of the bound port to macvtap, an authenticated user may cause the compute service to fail to restart, resulting in a possible denial of service. Only Nova deployments configured with SR-IOV are affected.
CVSS Score: 3.3 (LOW)
References: https://bugs.launchpad.net/ossa/+bug/1981813; https://review.opendev.org/c/openstack/nova/+/849985; https://review.opendev.org/c/openstack/nova/+/850003
CVE: CVE-2022-23442
Published: 2022-08-03
Description: An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands.
CVSS Score: 4.3 (MEDIUM)
References: https://fortiguard.com/psirt/FG-IR-22-036; https://fortiguard.com/psirt/FG-IR-22-036
CVE: CVE-2022-27484
Published: 2022-08-03
Description: A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://fortiguard.com/psirt/FG-IR-22-055; https://fortiguard.com/psirt/FG-IR-22-055
CVE: CVE-2022-32292
Published: 2022-08-03
Description: In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://bugzilla.suse.com/show_bug.cgi?id=1200189; https://lore.kernel.org/connman/[PII_REDACTED]0043.4861-5-wagi%40monom.org/; https://security.gentoo.org/glsa/202310-21
CVE: CVE-2022-32293
Published: 2022-08-03
Description: In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to crashes or code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://bugzilla.suse.com/show_bug.cgi?id=1200190; https://lore.kernel.org/connman/[PII_REDACTED]0043.4861-1-wagi%40monom.org/; https://lore.kernel.org/connman/[PII_REDACTED]0043.4861-3-wagi%40monom.org/
CVE: CVE-2022-36359
Published: 2022-08-03
Description: An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is derived from user-supplied input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494
References: http://www.openwall.com/lists/oss-security/2022/08/03/1; https://docs.djangoproject.com/en/4.0/releases/security/; https://groups.google.com/g/django-announce/c/8cz--gvaJr4
CVE: CVE-2022-34973
Published: 2022-08-03
Description: D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/[PII_REDACTED]/iot/blob/main/DIR-820L.md; https://www.dlink.com/en/security-bulletin/; https://github.com/[PII_REDACTED]/iot/blob/main/DIR-820L.md
CVE: CVE-2022-34974
Published: 2022-08-03
Description: D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/[PII_REDACTED]/iot/blob/main/DIR-810L.md; https://www.dlink.com/en/security-bulletin/; https://github.com/[PII_REDACTED]/iot/blob/main/DIR-810L.md
CVE: CVE-2022-35619
Published: 2022-08-03
Description: D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function ssdpcgi_main.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/[PII_REDACTED]/iot/blob/main/DIR-818L.md; https://www.dlink.com/en/security-bulletin/; https://github.com/[PII_REDACTED]/iot/blob/main/DIR-818L.md
CVE: CVE-2022-35620
Published: 2022-08-03
Description: D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcgi_main.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/[PII_REDACTED]/iot/blob/main/DIR-818L.md; https://www.dlink.com/en/security-bulletin/; https://github.com/[PII_REDACTED]/iot/blob/main/DIR-818L.md
CVE: CVE-2022-28668
Published: 2022-08-03
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16679.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-22-622/; https://www.zerodayinitiative.com/advisories/ZDI-22-622/
CVE: CVE-2022-28684
Published: 2022-08-03
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specific flaw exists within the SafeBinaryFormatter library. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-16710.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://www.zerodayinitiative.com/advisories/ZDI-22-872/; https://www.zerodayinitiative.com/advisories/ZDI-22-872/
CVE: CVE-2022-2272
Published: 2022-08-03
Description: This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the login endpoint. When parsing the username element, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17331.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.zerodayinitiative.com/advisories/ZDI-22-955/; https://www.zerodayinitiative.com/advisories/ZDI-22-955/
CVE: CVE-2022-34871
Published: 2022-08-03
Description: This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of poller resources. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an administrator. Was ZDI-CAN-16335.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://docs.centreon.com/docs/21.10/releases/centreon-core/; https://www.zerodayinitiative.com/advisories/ZDI-22-953/; https://docs.centreon.com/docs/21.10/releases/centreon-core/
CVE: CVE-2022-34872
Published: 2022-08-03
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of Virtual Metrics. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-16336.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://docs.centreon.com/docs/21.10/releases/centreon-core/; https://www.zerodayinitiative.com/advisories/ZDI-22-954/; https://docs.centreon.com/docs/21.10/releases/centreon-core/
CVE: CVE-2022-35864
Published: 2022-08-03
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-16690.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://community.bmc.com/s/article/Security-vulnerabilities-patched-in-Track-It-Version-2; https://www.zerodayinitiative.com/advisories/ZDI-22-967/; https://community.bmc.com/s/article/Security-vulnerabilities-patched-in-Track-It-Version-2
CVE: CVE-2022-35865
Published: 2022-08-03
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-16709.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://community.bmc.com/s/article/Security-vulnerabilities-patched-in-Track-It-Version-2; https://www.zerodayinitiative.com/advisories/ZDI-22-968/; https://community.bmc.com/s/article/Security-vulnerabilities-patched-in-Track-It-Version-2
CVE: CVE-2022-35866
Published: 2022-08-03
Description: This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MySQL server. The server uses a hard-coded password for the administrator user. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17139.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/176794/Vinchin-Backup-And-Recovery-7.2-Default-MySQL-Credentials.html; http://seclists.org/fulldisclosure/2024/Jan/30; https://www.zerodayinitiative.com/advisories/ZDI-22-959/
CVE: CVE-2022-35867
Published: 2022-08-03
Description: This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the e1000 virtual device. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-15056.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121
References: https://www.zerodayinitiative.com/advisories/ZDI-22-949/; https://www.zerodayinitiative.com/advisories/ZDI-22-949/
CVE: CVE-2022-37396
Published: 2022-08-03
Description: In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-94
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-34992
Published: 2022-08-03
Description: Luadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/viruscamp/luadec/issues/84; https://github.com/viruscamp/luadec/issues/84
CVE: CVE-2022-31175
Published: 2022-08-03
Description: CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages in versions prior to 35.0.1. The vulnerability allowed to trigger a JavaScript code after fulfilling special conditions. The affected packages are `@ckeditor/ckeditor5-markdown-gfm`, `@ckeditor/ckeditor5-html-support`, and `@ckeditor/ckeditor5-html-embed`. The specific conditions are 1) Using one of the affected packages. In case of `ckeditor5-html-support` and `ckeditor5-html-embed`, additionally, it was required to use a configuration that allows unsafe markup inside the editor. 2) Destroying the editor instance and 3) Initializing the editor on an element and using an element other than `<textarea>` as a base. The root cause of the issue was a mechanism responsible for updating the source element with the markup coming from the CKEditor 5 data pipeline after destroying the editor. This vulnerability might affect a small percent of integrators that depend on dynamic editor initialization/destroy and use Markdown, General HTML Support or HTML embed features. The problem has been recognized and patched. The fix is available in version 35.0.1. There are no known workarounds for this issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79
References: https://ckeditor.com/docs/ckeditor5/latest/features/general-html-support.html; https://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html; https://ckeditor.com/docs/ckeditor5/latest/features/markdown.html
CVE: CVE-2022-31197
Published: 2022-08-03
Description: PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not performing escaping of column names so a malicious column name that contains a statement terminator, e.g. `;`, could lead to SQL injection. This could lead to executing additional SQL commands as the application's JDBC user. User applications that do not invoke the `ResultSet.refreshRow()` method are not impacted. User application that do invoke that method are impacted if the underlying database that they are querying via their JDBC application may be under the control of an attacker. The attack requires the attacker to trick the user into executing SQL against a table name who's column names would contain the malicious SQL and subsequently invoke the `refreshRow()` method on the ResultSet. Note that the application's JDBC user and the schema owner need not be the same. A JDBC application that executes as a privileged user querying database schemas owned by potentially malicious less-privileged users would be vulnerable. In that situation it may be possible for the malicious user to craft a schema that causes the application to execute commands as the privileged user. Patched versions will be released as `42.2.26` and `42.4.1`. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: https://github.com/pgjdbc/pgjdbc/commit/739e599d52ad80f8dcd6efedc6157859b1a9d637; https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c4h4-hqq2; https://lists.debian.org/debian-lts-announce/2022/10/msg00009.html
CVE: CVE-2022-27551
Published: 2022-08-03
Description: HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099732; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099732
CVE: CVE-2022-35928
Published: 2022-08-03
Description: AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checked before being read. This vulnerability may lead to buffer overruns. This does _not_ affect source code found on aescrypt.com, nor is the vulnerability present when providing a password or a key via the `-p` or `-k` command-line options. The problem was fixed via in commit 68761851b and will be included in release 3.16. Users are advised to upgrade. Users unable to upgrade should us the `-p` or `-k` options to provide a password or key.
CVSS Score: 8.4 (HIGH)
CWE: CWE-120, CWE-1284
References: https://github.com/paulej/AESCrypt/commit/68761851b595e96c68c3f46bfc21167e72c6a22c; https://github.com/paulej/AESCrypt/security/advisories/GHSA-r7fv-72pg-fwrq; https://github.com/paulej/AESCrypt/commit/68761851b595e96c68c3f46bfc21167e72c6a22c
CVE: CVE-2021-43178
Published: 2022-08-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-43179
Published: 2022-08-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2022-35158
Published: 2022-08-03
Description: A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a crafted lua script.
CVSS Score: 7.5 (HIGH)
References: https://github.com/Tencent/TscanCode/issues/65; https://github.com/Tencent/TscanCode/issues/65
CVE: CVE-2022-35161
Published: 2022-08-03
Description: GVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the handleConfigCmd function at SerialConsole.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/collin80/GVRET/issues/27; https://github.com/collin80/GVRET/issues/27
CVE: CVE-2022-35505
Published: 2022-08-03
Description: A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/h3xduck/TripleCross/issues/40; https://github.com/h3xduck/TripleCross/issues/40
CVE: CVE-2022-35506
Published: 2022-08-03
Description: TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/h3xduck/TripleCross/issues/40; https://github.com/h3xduck/TripleCross/issues/40
CVE: CVE-2022-27166
Published: 2022-08-04
Description: A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732
CVE: CVE-2022-28730
Published: 2022-08-04
Description: A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce plugin dangerously renders user-supplied URLs. Upon re-testing CVE-2021-40369, it appears that the patch was incomplete as it was still possible to insert malicious input via the Denounce plugin. Apache JSPWiki users should upgrade to 2.11.3 or later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732
CVE: CVE-2022-28731
Published: 2022-08-04
Description: A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732
CVE: CVE-2022-28732
Published: 2022-08-04
Description: A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.3 or later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732