deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2574
Published: 2022-10-17
Description: The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/9dec8ac7-befd-4c9d-9a9e-7da9e395dbf2; https://wpscan.com/vulnerability/9dec8ac7-befd-4c9d-9a9e-7da9e395dbf2
CVE: CVE-2022-2834
Published: 2022-10-17
Description: The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Email Address depending on the plugin's settings
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-552
References: https://wpscan.com/vulnerability/468d5fc7-04c6-4354-b134-85ebb25b37ae; https://wpscan.com/vulnerability/468d5fc7-04c6-4354-b134-85ebb25b37ae
CVE: CVE-2022-3082
Published: 2022-10-17
Description: The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing any logged in users, such as subscriber to call them, and disable the app for example
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/a91d0501-c2a9-4c6c-b5da-b3fc29442a4f; https://wpscan.com/vulnerability/a91d0501-c2a9-4c6c-b5da-b3fc29442a4f
CVE: CVE-2022-3126
Published: 2022-10-17
Description: The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in users upload files on their behalf
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/7db363bf-7bef-4d47-9963-c30d6fdd2fb8; https://wpscan.com/vulnerability/7db363bf-7bef-4d47-9963-c30d6fdd2fb8
CVE: CVE-2022-3131
Published: 2022-10-17
Description: The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/b6c62e53-ae49-4fe0-aed9-0c493fc4442d; https://wpscan.com/vulnerability/b6c62e53-ae49-4fe0-aed9-0c493fc4442d
CVE: CVE-2022-3139
Published: 2022-10-17
Description: The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/11c89925-4fe9-45f7-9020-55fe7bbae3db; https://wpscan.com/vulnerability/11c89925-4fe9-45f7-9020-55fe7bbae3db
CVE: CVE-2022-3149
Published: 2022-10-17
Description: The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors, which could allow attackers to made a logged in admin perform such actions via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping in some of the cursor options, it could also lead to Stored Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/4c13a93d-2100-4721-8937-a[PII_REDACTED]f; https://wpscan.com/vulnerability/4c13a93d-2100-4721-8937-a[PII_REDACTED]f
CVE: CVE-2022-3150
Published: 2022-10-17
Description: The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privileged users such as admin
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/bb0806d7-21e3-4a65-910c-bf0625c338ec; https://wpscan.com/vulnerability/bb0806d7-21e3-4a65-910c-bf0625c338ec
CVE: CVE-2022-3151
Published: 2022-10-17
Description: The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/27816c70-58ad-4ffb-adcc-69eb1b210744; https://wpscan.com/vulnerability/27816c70-58ad-4ffb-adcc-69eb1b210744
CVE: CVE-2022-3206
Published: 2022-10-17
Description: The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319, CWE-522
References: https://wpscan.com/vulnerability/a8963750-62bf-403e-a906-94f371ed2a7a; https://wpscan.com/vulnerability/a8963750-62bf-403e-a906-94f371ed2a7a
CVE: CVE-2022-3243
Published: 2022-10-17
Description: The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection exploitable by high privilege users such as admin
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/9f03bc1a-214f-451a-89fd-2cd3517e8f8a; https://wpscan.com/vulnerability/9f03bc1a-214f-451a-89fd-2cd3517e8f8a
CVE: CVE-2022-3244
Published: 2022-10-17
Description: The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage to get the related nonce
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/de4bc449-3dd4-4776-943f-ac59ae813132; https://wpscan.com/vulnerability/de4bc449-3dd4-4776-943f-ac59ae813132
CVE: CVE-2022-3282
Published: 2022-10-17
Description: The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from user input sent when submitting the form. As a result, attackers could control the file length limit and bypass the limit set by admins in the contact form.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://wpscan.com/vulnerability/035dffef-4b4b-4afb-9776-7f6c5e56452c; https://wpscan.com/vulnerability/035dffef-4b4b-4afb-9776-7f6c5e56452c
CVE: CVE-2022-3541
Published: 2022-10-17
Description: A vulnerability classified as critical has been found in Linux Kernel. This affects the function spl2sw_nvmem_get_mac_address of the file drivers/net/ethernet/sunplus/spl2sw_driver.c of the component BPF. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211041 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=12aece8b01507a2d357a1861f470e83621fbb6f2; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://vuldb.com/?id.211041
CVE: CVE-2022-3542
Published: 2022-10-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-3543
Published: 2022-10-17
Description: A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unix_sock_destructor/unix_release_sock of the file net/unix/af_unix.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211043.
CVSS Score: 3.5 (LOW)
CWE: CWE-404, CWE-401
References: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=7a62ed61367b8fd01bae1e18e30602c25060d824; https://vuldb.com/?id.211043; https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id=7a62ed61367b8fd01bae1e18e30602c25060d824
CVE: CVE-2022-3544
Published: 2022-10-17
Description: A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected is the function damon_sysfs_add_target of the file mm/damon/sysfs.c of the component Netfilter. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211044.
CVSS Score: 3.5 (LOW)
CWE: CWE-404
References: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git/commit/?id=1c8e2349f2d033f634d046063b704b2ca6c46972; https://vuldb.com/?id.211044; https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git/commit/?id=1c8e2349f2d033f634d046063b704b2ca6c46972
CVE: CVE-2022-3545
Published: 2022-10-17
Description: A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=02e1a114fdb71e59ee[PII_REDACTED]c30d437bf86a; https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE: CVE-2022-3546
Published: 2022-10-17
Description: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handler. The manipulation of the argument First Name/Last Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-211046 is the identifier assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/thehackingverse/Stored-xss-/blob/main/Poc; https://vuldb.com/?id.211046; https://github.com/thehackingverse/Stored-xss-/blob/main/Poc
CVE: CVE-2022-3547
Published: 2022-10-17
Description: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=system_info of the component Setting Handler. The manipulation of the argument System Name/System Short Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-211047.
CVSS Score: 2.4 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/lakshaya0557/POCs/blob/main/POC; https://vuldb.com/?id.211047; https://github.com/lakshaya0557/POCs/blob/main/POC
CVE: CVE-2022-3548
Published: 2022-10-17
Description: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Add New Storage Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-211048.
CVSS Score: 2.4 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/Ramansh123454/POCs/blob/main/POC; https://vuldb.com/?id.211048; https://github.com/Ramansh123454/POCs/blob/main/POC
CVE: CVE-2022-3549
Published: 2022-10-17
Description: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /csms/admin/?page=user/manage_user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211049 was assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-266, CWE-434
References: https://github.com/Ramansh123454/POCs/blob/main/CSMS_RCE; https://vuldb.com/?id.211049; https://github.com/Ramansh123454/POCs/blob/main/CSMS_RCE
CVE: CVE-2022-3550
Published: 2022-10-17
Description: A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function _GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211051.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-120
References: https://cgit.freedesktop.org/xorg/xserver/commit/?id=11beef0b7f1ed290348e45618e5fa0d2bffcb72e; https://lists.debian.org/debian-lts-announce/2022/11/msg00012.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTPFVGYTOY4EWTJEBH3YGDTTU57FZAK/
CVE: CVE-2022-3551
Published: 2022-10-17
Description: A vulnerability, which was classified as problematic, has been found in X.org Server. Affected by this issue is the function ProcXkbGetKbdByName of the file xkb/xkb.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211052.
CVSS Score: 3.5 (LOW)
CWE: CWE-404, CWE-401
References: https://cgit.freedesktop.org/xorg/xserver/commit/?id=18f91b950e22c2a342a4fbc55e9ddf7534a707d2; https://lists.debian.org/debian-lts-announce/2022/11/msg00012.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QTPFVGYTOY4EWTJEBH3YGDTTU57FZAK/
CVE: CVE-2022-3553
Published: 2022-10-17
Description: A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m of the component xquartz. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier VDB-211053 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-404
References: https://cgit.freedesktop.org/xorg/xserver/commit/?id=dfd057996b26420309c324ec844a5ba6dd07eda3; https://security.gentoo.org/glsa/202305-30; https://vuldb.com/?id.211053
CVE: CVE-2022-3554
Published: 2022-10-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-3555
Published: 2022-10-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-42163
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/fromNatStaticSetting/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/fromNatStaticSetting/readme.md
CVE: CVE-2022-42164
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetClientState/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetClientState/readme.md
CVE: CVE-2022-42165
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetDeviceName/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetDeviceName/readme.md
CVE: CVE-2022-41471
Published: 2022-10-17
Description: 74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/xxhzz1/74cmsSE-Improper-permission-configuration-vulnerability/issues/1; https://github.com/xxhzz1/74cmsSE-Improper-permission-configuration-vulnerability/issues/1
CVE: CVE-2022-41472
Published: 2022-10-17
Description: 74cmsSE v3.12.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/xxhzz1/74cmsSE-Storage-cross-site-scripting-vulnerability/issues/1; https://github.com/xxhzz1/74cmsSE-Storage-cross-site-scripting-vulnerability/issues/1
CVE: CVE-2022-41498
Published: 2022-10-17
Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editbrand.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/aurigee/bug_report/blob/main/vendors/mayuri_k/billing-system-project/SQLi-1.md; https://github.com/aurigee/bug_report/blob/main/vendors/mayuri_k/billing-system-project/SQLi-1.md
CVE: CVE-2022-41542
Published: 2022-10-17
Description: devhub 0.102.0 was discovered to contain a broken session control.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-613, CWE-613
References: http://devhub.com; https://app.devhubapp.com/; https://devhubapp.com/
CVE: CVE-2022-42154
Published: 2022-10-17
Description: An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/xxhzz1/74cmsSE-Arbitrary-file-upload-vulnerability/issues/1; https://github.com/xxhzz1/74cmsSE-Arbitrary-file-upload-vulnerability/issues/1
CVE: CVE-2022-42166
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetSpeedWan/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetSpeedWan/readme.md
CVE: CVE-2022-42167
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetFirewallCfg/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formSetFirewallCfg/readme.md
CVE: CVE-2022-42168
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/fromSetIpMacBind/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/fromSetIpMacBind/readme.md
CVE: CVE-2022-42169
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/addWifiMacFilter/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/addWifiMacFilter/readme.md
CVE: CVE-2022-42170
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formWifiWpsStart/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/formWifiWpsStart/readme.md
CVE: CVE-2022-42171
Published: 2022-10-17
Description: Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/saveParentControlInfo/readme.md; https://github.com/z1r00/IOT_Vul/blob/main/Tenda/AC10/saveParentControlInfo/readme.md
CVE: CVE-2022-42237
Published: 2022-10-17
Description: A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/draco1725/sqlinj/blob/main/poc; https://github.com/draco1725/sqlinj/blob/main/poc
CVE: CVE-2017-7517
Published: 2022-10-17
Description: An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access the metrics stored from the original "MyProject" instance.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: https://access.redhat.com/security/cve/CVE-2017-7517; https://bugzilla.redhat.com/show_bug.cgi?id=1470414; https://access.redhat.com/security/cve/CVE-2017-7517
CVE: CVE-2019-14840
Published: 2022-10-17
Description: A flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete enabled which may lead to leak of credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://access.redhat.com/security/cve/CVE-2019-14840; https://bugzilla.redhat.com/show_bug.cgi?id=1748185; https://access.redhat.com/security/cve/CVE-2019-14840
CVE: CVE-2019-14841
Published: 2022-10-17
Description: A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an attacker to gain admin privileges in the Business Central Console.
CVSS Score: 8.8 (HIGH)
CWE: CWE-281, CWE-281
References: https://access.redhat.com/security/cve/CVE-2019-14841; https://bugzilla.redhat.com/show_bug.cgi?id=1744801; https://access.redhat.com/security/cve/CVE-2019-14841
CVE: CVE-2020-35539
Published: 2022-10-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-0699
Published: 2022-10-17
Description: A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-415
References: https://github.com/OSGeo/shapelib/commit/c75b9281a5b9452d92e1682bdfe6019a13ed819f; https://github.com/OSGeo/shapelib/issues/39; https://github.com/OSGeo/shapelib/commit/c75b9281a5b9452d92e1682bdfe6019a13ed819f
CVE: CVE-2022-22128
Published: 2022-10-17
Description: Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau only supports product versions for 24 months after release. Older versions have reached their End of Life and are no longer supported. They are also not assessed for potential security issues and do not receive security updates.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://help.salesforce.com/s/articleView?id=000367027&type=1; https://kb.tableau.com/articles/Issue/issue-affecting-tableau-server-administration-agent; https://help.salesforce.com/s/articleView?id=000367027&type=1
CVE: CVE-2022-23769
Published: 2022-10-17
Description: Remote code execution vulnerability due to insufficient user privilege verification in reverseWall-MDS. Remote attackers can exploit the vulnerability such as stealing account, through remote code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66962; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66962