deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-0251
Published: 2022-01-26
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/3ae96b9d41c117aafa45873ad10077d4b873a3cb; https://huntr.dev/bounties/eb4b08f9-cf8b-4335-b3b8-ed44e5fa80a5; https://github.com/pimcore/pimcore/commit/3ae96b9d41c117aafa45873ad10077d4b873a3cb
CVE: CVE-2022-22932
Published: 2022-01-26
Description: Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr:* commands are not very used and the entry is set by user. This has been fixed in revision: https://gitbox.apache.org/repos/asf?p=karaf.git;h=36a2bc4 https://gitbox.apache.org/repos/asf?p=karaf.git;h=52b70cf Mitigation: Apache Karaf users should upgrade to 4.2.15 or 4.3.6 or later as soon as possible, or use correct path. JIRA Tickets: https://issues.apache.org/jira/browse/KARAF-7326
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://karaf.apache.org/security/cve-2022-22932.txt; https://karaf.apache.org/security/cve-2022-22932.txt
CVE: CVE-2021-44118
Published: 2022-01-26
Description: SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must browse to a malicious SVG file. The vulnerability allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users (stored XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://git.spip.net/spip/medias/commit/13c293fabd35e2c152379522c[PII_REDACTED]6cbba; https://git.spip.net/spip/spip/commit/1cf91def15966406ddd0488cf9d1ecd1ae82d47a; https://git.spip.net/spip/spip/commit/4ccf90a6912d7fab97e1bd5619770c9236cc7357
CVE: CVE-2021-44120
Published: 2022-01-26
Description: SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the function safehtml to the vulnerable fields. An editor is able to modify his personal information. If the editor has an article written and available, when a user goes to the public site and wants to read the author's information, the malicious code will be executed. The "Who are you" and "Website Name" fields are vulnerable.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://git.spip.net/spip/spip/commit/d548391d799387d1e93cf1a369d385c72f7d5c81; https://git.spip.net/spip/spip/commit/d548391d799387d1e93cf1a369d385c72f7d5c81
CVE: CVE-2021-44122
Published: 2022-01-26
Description: SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public/aiguiller.php, ecrire/public/balises.php, ecrire/balise/formulaire_.php. To exploit the vulnerability, a visitor must visit a malicious website which redirects to the SPIP website. It is also possible to combine XSS vulnerabilities in SPIP 4.0.0 to exploit it. The vulnerability allows an authenticated attacker to execute malicious code without the knowledge of the user on the website (CSRF).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://git.spip.net/spip/spip/commit/1b8e4f404c2441c15ca6540b9a6d8e50cff219db; https://git.spip.net/spip/spip/commit/1b8e4f404c2441c15ca6540b9a6d8e50cff219db
CVE: CVE-2021-44123
Published: 2022-01-26
Description: SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craft a malicious picture with a double extension, upload it and then click on it to execute it.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://git.spip.net/spip/spip/commit/1cf91def15966406ddd0488cf9d1ecd1ae82d47a; https://git.spip.net/spip/spip/commit/1cf91def15966406ddd0488cf9d1ecd1ae82d47a
CVE: CVE-2022-0359
Published: 2022-01-26
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; http://seclists.org/fulldisclosure/2022/Oct/43
CVE: CVE-2022-0203
Published: 2022-01-26
Description: Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://github.com/crater-invoice/crater/commit/dd324c8bb6b17009f82afe8bc830caec7241e992; https://huntr.dev/bounties/395fc553-2b90-4e69-ba07-a316e1c06406; https://github.com/crater-invoice/crater/commit/dd324c8bb6b17009f82afe8bc830caec7241e992
CVE: CVE-2022-0361
Published: 2022-01-26
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; http://seclists.org/fulldisclosure/2022/Oct/43
CVE: CVE-2022-0362
Published: 2022-01-26
Description: SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/star7th/showdoc/commit/2b34e267e4186125f99bfa420140634ad45801fb; https://huntr.dev/bounties/e7c72417-eb8f-416c-8480-be76ac0a9091; https://github.com/star7th/showdoc/commit/2b34e267e4186125f99bfa420140634ad45801fb
CVE: CVE-2021-22570
Published: 2022-01-26
Description: Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/protocolbuffers/protobuf/releases/tag/v3.15.0; https://lists.debian.org/debian-lts-announce/2023/04/msg00019.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DVUZPALAQ34TQP6KFNLM4IZS6B32XSA/
CVE: CVE-2021-22600
Published: 2022-01-26
Description: A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-45975
Published: 2022-01-26
Description: In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://acercsi.com; https://aptw.tf/2022/01/20/acer-care-center-privesc.html; https://community.acer.com/en/kb/articles/14757-acer-care-center-requires-an-update-to-resolve-a-security-vulnerability
CVE: CVE-2021-43334
Published: 2022-01-26
Description: BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.buddyboss.com/resources/buddyboss-platform-releases/; https://www.cygenta.co.uk/post/buddyboss; https://www.buddyboss.com/resources/buddyboss-platform-releases/
CVE: CVE-2021-44692
Published: 2022-01-26
Description: BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a Unique ID for their profile. This UID is their private email address with symbols removed and periods replaced with hyphens. For example. JohnDoe@example.com would become /members/johndoeexample-com and Jo.test@example.com would become /members/jo-testexample-com. The members list is available to everyone and (in a default configuration) often without authentication. It is therefore trivial to collect a list of email addresses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.buddyboss.com/resources/buddyboss-platform-releases/; https://www.cygenta.co.uk/post/buddyboss; https://www.buddyboss.com/resources/buddyboss-platform-releases/
CVE: CVE-2021-46117
Published: 2022-01-26
Description: jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://jpress.com; https://github.com/JPressProjects/jpress; https://github.com/JPressProjects/jpress/issues/171
CVE: CVE-2022-0378
Published: 2022-01-26
Description: Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/fc7e1a026735b93f0e0047700d08c44954fce9ce; https://huntr.dev/bounties/529b65c0-5be7-49d4-9419-f905b8153d31; https://github.com/microweber/microweber/commit/fc7e1a026735b93f0e0047700d08c44954fce9ce
CVE: CVE-2022-0379
Published: 2022-01-26
Description: Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/f017cbfbd5c4f097d2c78c5e15b6c8a9da479d7b; https://huntr.dev/bounties/933f94b8-c5e7-4c3a-92e0-4d1577d5fee6; https://github.com/microweber/microweber/commit/f017cbfbd5c4f097d2c78c5e15b6c8a9da479d7b
CVE: CVE-2022-22851
Published: 2022-01-26
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the specialization parameter in doctors.php
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Sant268/CVE-2022-22851/commit/17381378bdb7c9f7b3326af6fb79cf68ca9f9d3d; https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html; https://github.com/Sant268/CVE-2022-22851/commit/17381378bdb7c9f7b3326af6fb79cf68ca9f9d3d
CVE: CVE-2021-46115
Published: 2022-01-26
Description: jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a function through which attackers can upload templates and inject some malicious code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://jpress.com; https://github.com/JPressProjects/jpress; https://github.com/JPressProjects/jpress/issues/169
CVE: CVE-2021-46116
Published: 2022-01-26
Description: jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController#doInstall. The admin panel provides a function through which attackers can install templates and inject some malicious code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://jpress.com; https://github.com/JPressProjects/jpress; https://github.com/JPressProjects/jpress/issues/168
CVE: CVE-2021-46118
Published: 2022-01-26
Description: jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://jpress.com; https://github.com/JPressProjects/jpress; https://github.com/JPressProjects/jpress/issues/170
CVE: CVE-2021-46383
Published: 2022-01-26
Description: https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.web.DictAction#list. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://gitee.com/mingSoft/MCMS/issues/I4QZ1I; https://gitee.com/mingSoft/MCMS/issues/I4QZ1I
CVE: CVE-2021-46386
Published: 2022-01-26
Description: File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://gitee.com/mingSoft/MCMS/issues/I4R0GW; https://gitee.com/mingSoft/MCMS/issues/I4R0GW
CVE: CVE-2021-29838
Published: 2022-01-26
Description: IBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205026; https://www.ibm.com/support/pages/node/6550866; https://exchange.xforce.ibmcloud.com/vulnerabilities/205026
CVE: CVE-2021-29845
Published: 2022-01-26
Description: IBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized actions due to improper input validation. IBM X-Force ID: 205255.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205255; https://www.ibm.com/support/pages/node/6550866; https://exchange.xforce.ibmcloud.com/vulnerabilities/205255
CVE: CVE-2021-29846
Published: 2022-01-26
Description: IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 205256.
CVSS Score: 2.7 (LOW)
CWE: CWE-613
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205256; https://www.ibm.com/support/pages/node/6550866; https://exchange.xforce.ibmcloud.com/vulnerabilities/205256
CVE: CVE-2021-46561
Published: 2022-01-26
Description: controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before 5c50baf3bda28133a3bc90b854765a64fb538304 allows an organizational administrator to transfer a user account to an arbitrary new organization, and thereby achieve unintended access within the context of that new organization.
CVSS Score: 7.2 (HIGH)
CWE: CWE-863
References: https://github.com/CVEProject/cve-services/commit/5c50baf3bda28133a3bc90b854765a64fb538304; https://github.com/CVEProject/cve-services/commit/5c50baf3bda28133a3bc90b854765a64fb538304
CVE: CVE-2022-0368
Published: 2022-01-26
Description: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; http://seclists.org/fulldisclosure/2022/Oct/43
CVE: CVE-2021-46114
Published: 2022-01-26
Description: jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://jpress.com; https://github.com/JPressProjects/jpress; https://github.com/JPressProjects/jpress/issues/172
CVE: CVE-2021-46385
Published: 2022-01-26
Description: https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.FormDataAction#queryData. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://gitee.com/mingSoft/MCMS/issues/I4QZ1K; https://gitee.com/mingSoft/MCMS/issues/I4QZ1K
CVE: CVE-2022-22850
Published: 2022-01-26
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in room_types.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Sant268/CVE-2022-22850/blob/main/CVE-2022-22850.md; https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html; https://github.com/Sant268/CVE-2022-22850/blob/main/CVE-2022-22850.md
CVE: CVE-2022-23990
Published: 2022-01-26
Description: Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf; https://github.com/libexpat/libexpat/pull/551; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/
CVE: CVE-2022-23993
Published: 2022-01-26
Description: /usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP echo call, causing XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.netgate.com/downloads/pfSense-SA-22_04.webgui.asc; https://github.com/pfsense/pfsense/commit/5d82cce0d615a76b738798577a28a15803e59aeb; https://docs.netgate.com/downloads/pfSense-SA-22_04.webgui.asc
CVE: CVE-2022-21686
Published: 2022-01-26
Description: PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/PrestaShop/PrestaShop/commit/d02b469ec365822e6a9f017e57f588966248bf21; https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.3; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mrq4-7ch7-2465
CVE: CVE-2022-22852
Published: 2022-01-26
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in room_list.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Sant268/CVE-2022-22852/blob/main/CVE-2022-22852.md; https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html; https://github.com/Sant268/CVE-2022-22852/blob/main/CVE-2022-22852.md
CVE: CVE-2021-32840
Published: 2022-01-26
Description: SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in the parent directory of `destFolder`. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/icsharpcode/SharpZipLib/commit/a0e96de70b5264f4c919b09253b1522bc7a221cc; https://github.com/icsharpcode/SharpZipLib/releases/tag/v1.3.3; https://securitylab.github.com/advisories/GHSL-2021-125-sharpziplib/
CVE: CVE-2021-32842
Published: 2022-01-26
Description: SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.0.0 and prior to version 1.3.3, a check was added if the destination file is under a destination directory. However, it is not enforced that `_baseDirectory` ends with slash. If the _baseDirectory is not slash terminated like `/home/user/dir` it is possible to create a file with a name thats begins as the destination directory one level up from the directory, i.e. `/home/user/dir.sh`. Because of the file name and destination directory constraints, the arbitrary file creation impact is limited and depends on the use case. Version 1.3.3 fixed this vulnerability.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/icsharpcode/SharpZipLib/releases/tag/v1.3.3; https://securitylab.github.com/advisories/GHSL-2021-125-sharpziplib/; https://github.com/icsharpcode/SharpZipLib/releases/tag/v1.3.3
CVE: CVE-2022-23967
Published: 2022-01-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-15679. Reason: This candidate is a duplicate of CVE-2019-15679. Notes: All CVE users should reference CVE-2019-15679 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2021-32841
Published: 2022-01-26
Description: SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Starting version 1.3.0 and prior to version 1.3.3, a check was added if the destination file is under destination directory. However, it is not enforced that `destDir` ends with slash. If the `destDir` is not slash terminated like `/home/user/dir` it is possible to create a file with a name thats begins with the destination directory, i.e. `/home/user/dir.sh`. Because of the file name and destination directory constraints, the arbitrary file creation impact is limited and depends on the use case. Version 1.3.3 contains a patch for this vulnerability.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/icsharpcode/SharpZipLib/commit/5c3b293de5d65b108e7f2cd0ea8f81c1b8273f78; https://github.com/icsharpcode/SharpZipLib/releases/tag/v1.3.3; https://securitylab.github.com/advisories/GHSL-2021-125-sharpziplib/
CVE: CVE-2021-32849
Published: 2022-01-26
Description: Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-77
References: https://github.com/Gerapy/Gerapy/issues/197; https://github.com/Gerapy/Gerapy/issues/217; https://github.com/Gerapy/Gerapy/security/advisories/GHSA-756h-r2c9-qp5j
CVE: CVE-2021-41166
Published: 2022-01-26
Description: The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required `MANAGE_DOCUMENTS` permission may view image thumbnails for images it does not have permission to view. Version 3.17.1 contains a patch. There are no known workarounds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://github.com/nextcloud/android/commit/aa[PII_REDACTED]0b8449c4e44601eba36e3481b086; https://github.com/nextcloud/android/commit/b6ecf515b38c2d82d32743f27236534f3e03ee0c; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wrwg-jwpg-r3c4
CVE: CVE-2022-21722
Published: 2022-01-27
Description: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version 2.11.1 and prior, there are various cases where it is possible that certain incoming RTP/RTCP packets can potentially cause out-of-bound read access. This issue affects all users that use PJMEDIA and accept incoming RTP/RTCP. A patch is available as a commit in the `master` branch. There are no known workarounds.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://github.com/pjsip/pjproject/commit/22af44e68a0c7d190ac1e25075e1382f77e9397a; https://github.com/pjsip/pjproject/security/advisories/GHSA-m66q-q64c-hv36; https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html