deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-21768
Published: 2022-07-06
Description: In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784351; Issue ID: ALPS06784351.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21769
Published: 2022-07-06
Description: In CCCI, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641687.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21770
Published: 2022-07-06
Description: In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558663; Issue ID: ALPS06558663.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21771
Published: 2022-07-06
Description: In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; Issue ID: ALPS06641585.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21772
Published: 2022-07-06
Description: In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493842; Issue ID: ALPS06493842.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21773
Published: 2022-07-06
Description: In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641388; Issue ID: ALPS06641388.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21774
Published: 2022-07-06
Description: In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641447; Issue ID: ALPS06641447.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21775
Published: 2022-07-06
Description: In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479032; Issue ID: ALPS06479032.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-667
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21776
Published: 2022-07-06
Description: In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21777
Published: 2022-07-06
Description: In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06713894; Issue ID: ALPS06713894.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21779
Published: 2022-07-06
Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704393.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21780
Published: 2022-07-06
Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704526.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21781
Published: 2022-07-06
Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704433.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21782
Published: 2022-07-06
Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704508.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21783
Published: 2022-07-06
Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704482.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21784
Published: 2022-07-06
Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704462.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21785
Published: 2022-07-06
Description: In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06807363; Issue ID: ALPS06807363.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21786
Published: 2022-07-06
Description: In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822; Issue ID: ALPS06558822.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-704
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21787
Published: 2022-07-06
Description: In audio DSP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558844; Issue ID: ALPS06558844.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-23172
Published: 2022-07-06
Description: An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user. This way you can verify which users are in the system and which are not.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-640
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-23173
Published: 2022-07-06
Description: this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" then he can see in this menu all the functionality of the application. If the attacker will try to click on one of the links, he will get an answer that he is not authorized because he needs to log in with credentials. after he performed log in to the system there are some functionalities that the specific user is not allowed to perform because he was configured with low privileges however all the attacker need to do in order to achieve his goals is to change the value of the prog step parameter from 0 to 1 or more and then the attacker could access to some of the functionality the web application that he couldn't perform it before the parameter changed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-639
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-23713
Published: 2022-07-06
Description: A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613; https://www.elastic.co/community/security; https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613
CVE: CVE-2022-23714
Published: 2022-07-06
Description: A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613; https://www.elastic.co/community/security; https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613
CVE: CVE-2022-30619
Published: 2022-07-06
Description: Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in legacy Work Center module. He attack is available for any authenticated user, in any kind of rule. under the function : /AgilePointServer/Extension/FetchUsingEncodedData in the parameter: EncodedData
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-30929
Published: 2022-07-06
Description: Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://github.com/AgainstTheLight/CVE-2022-30929; https://t.me/WangPanBOT?start=file96eb2dc53cc57847; https://github.com/AgainstTheLight/CVE-2022-30929
CVE: CVE-2021-3695
Published: 2022-07-06
Description: A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform some triage over the heap layout to achieve signifcant results, also the values written into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 versions prior grub-2.12.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1991685; https://security.gentoo.org/glsa/202209-12; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-3696
Published: 2022-07-06
Description: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1991686; https://security.gentoo.org/glsa/202209-12; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-3697
Published: 2022-07-06
Description: A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1991687; https://security.gentoo.org/glsa/202209-12; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33737
Published: 2022-07-06
Description: The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password
CVSS Score: 7.5 (HIGH)
CWE: CWE-708, CWE-532
References: https://openvpn.net/vpn-server-resources/release-notes/; https://openvpn.net/vpn-server-resources/release-notes/
CVE: CVE-2022-33738
Published: 2022-07-06
Description: OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
CVSS Score: 7.5 (HIGH)
CWE: CWE-331, CWE-338
References: https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-11-0; https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-11-0
CVE: CVE-2022-26078
Published: 2022-07-06
Description: Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Gallagher Controller 6000 vCR8.60 versions prior to 220303a; vCR8.50 versions prior to 220303a; vCR8.40 versions prior to 220303a; vCR8.30 versions prior to 220303a.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://security.gallagher.com/Security-Advisories/CVE-2022-26078; https://security.gallagher.com/Security-Advisories/CVE-2022-26078
CVE: CVE-2022-26348
Published: 2022-07-06
Description: Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an attacker using the Visitor Management Kiosk, an application designed for public use, to invoke an arbitrary SQL query that has been preloaded into the registry of the Windows Server to obtain sensitive information. This issue affects: Gallagher Command Centre 8.60 versions prior to 8.60.1652; 8.50 versions prior to 8.50.2245; 8.40 versions prior to 8.40.2216; 8.30 versions prior to 8.30.1470; version 8.20 and prior versions.
CVSS Score: 8.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://security.gallagher.com/Security-Advisories/CVE-2022-26348; https://security.gallagher.com/Security-Advisories/CVE-2022-26348
CVE: CVE-2022-34595
Published: 2022-07-06
Description: Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/zhefox/IOT_Vul/blob/main/Tenda/tendaAX1803/readme_en.md; https://github.com/zhefox/IOT_Vul/blob/main/Tenda/tendaAX1803/readme_en.md
CVE: CVE-2022-34596
Published: 2022-07-06
Description: Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/zhefox/IOT_Vul/blob/main/Tenda/tendaAX1803/2/readme_en.md; https://github.com/zhefox/IOT_Vul/blob/main/Tenda/tendaAX1803/2/readme_en.md
CVE: CVE-2022-34597
Published: 2022-07-06
Description: Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/zhefox/IOT_Vul/blob/main/Tenda/TendaAX1806/readme_en.md; https://github.com/zhefox/IOT_Vul/blob/main/Tenda/TendaAX1806/readme_en.md
CVE: CVE-2022-34598
Published: 2022-07-06
Description: The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/zhefox/IOT_Vul/tree/main/H3C/H3CR100/1; https://github.com/zhefox/IOT_Vul/tree/main/H3C/H3CR100/1
CVE: CVE-2022-31111
Published: 2022-07-06
Description: Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between EVM balance type and Substrate balance type was incorrectly implemented. This leads to possible discrepancy between appeared EVM transfer value and actual Substrate value transferred. It is recommended that an emergency upgrade to be planned and EVM execution temporarily paused in the mean time. The issue is patched in Frontier master branch commit fed5e0a9577c10bea021721e8c2c5c378e16bf66 and polkadot-v0.9.22 branch commit e3e427fa2e5d1200a784679f8015d4774cedc934. This vulnerability affects only EVM internal states, but not Substrate balance states or node. You can temporarily pause EVM execution (by setting up a Substrate `CallFilter` that disables `pallet-evm` and `pallet-ethereum` calls before the patch can be applied.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-670
References: https://github.com/paritytech/frontier/commit/e3e427fa2e5d1200a784679f8015d4774cedc934; https://github.com/paritytech/frontier/commit/fed5e0a9577c10bea021721e8c2c5c378e16bf66; https://github.com/paritytech/frontier/pull/753
CVE: CVE-2022-31124
Published: 2022-07-06
Description: openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key files. In versions prior to 0.0.6 if a field of a key is shorter than it is declared to be, the parser raises an error with a message containing the raw field value. An attacker able to modify the declared length of a key's sensitive field can thus expose the raw value of that field. Users are advised to upgrade to version 0.0.6, which no longer includes the raw field value in the error message. There are no known workarounds for this issue.
CVSS Score: 7.7 (HIGH)
CWE: CWE-209, CWE-209
References: https://github.com/scottcwang/openssh_key_parser/commit/26e0a471e9fdb23e635bc3014cf4cbd2323a08d3; https://github.com/scottcwang/openssh_key_parser/commit/274447f91b4037b7050ae634879b657554523b39; https://github.com/scottcwang/openssh_key_parser/commit/d5b53b4b7e76c5b666fc657019dbf864fb04076c
CVE: CVE-2022-31125
Published: 2022-07-06
Description: Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTTP request. This affects Roxywi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/171648/Roxy-WI-6.1.0.0-Improper-Authentication-Control.html; https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-hr76-3hxp-5mm3; http://packetstormsecurity.com/files/171648/Roxy-WI-6.1.0.0-Improper-Authentication-Control.html
CVE: CVE-2022-31126
Published: 2022-07-06
Description: Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. This affects Roxy-wi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-74
References: https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-mh86-878h-43c9; https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-mh86-878h-43c9
CVE: CVE-2022-31127
Published: 2022-07-06
Description: NextAuth.js is a complete open source authentication solution for Next.js applications. An attacker can pass a compromised input to the e-mail [signin endpoint](https://next-auth.js.org/getting-started/rest-api#post-apiauthsigninprovider) that contains some malicious HTML, tricking the e-mail server to send it to the user, so they can perform a phishing attack. Eg.: `balazs@email.com, <a href="http://attacker.com">Before signing in, claim your money!</a>`. This was previously sent to `balazs@email.com`, and the content of the email containing a link to the attacker's site was rendered in the HTML. This has been remedied in the following releases, by simply not rendering that e-mail in the HTML, since it should be obvious to the receiver what e-mail they used: next-auth v3 users before version 3.29.8 are impacted. (We recommend upgrading to v4, as v3 is considered unmaintained. next-auth v4 users before version 4.9.0 are impacted. If for some reason you cannot upgrade, the workaround requires you to sanitize the `email` parameter that is passed to `sendVerificationRequest` and rendered in the HTML. If you haven't created a custom `sendVerificationRequest`, you only need to upgrade. Otherwise, make sure to either exclude `email` from the HTML body or efficiently sanitize it.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/nextauthjs/next-auth/commit/ae834f1e08a4a9915665eecb9479c74c6b039c9c; https://github.com/nextauthjs/next-auth/releases/tag/next-auth%40v4.9.0; https://github.com/nextauthjs/next-auth/security/advisories/GHSA-pgjx-7f9g-9463