deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-47331
Published: 2023-02-12
Description: In wlan driver, there is a race condition. This could lead to local denial of service in wlan services.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47332
Published: 2023-02-12
Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47333
Published: 2023-02-12
Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47339
Published: 2023-02-12
Description: In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47341
Published: 2023-02-12
Description: In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47342
Published: 2023-02-12
Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47343
Published: 2023-02-12
Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47344
Published: 2023-02-12
Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47345
Published: 2023-02-12
Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47346
Published: 2023-02-12
Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47347
Published: 2023-02-12
Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47348
Published: 2023-02-12
Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129, CWE-129
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47354
Published: 2023-02-12
Description: In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47355
Published: 2023-02-12
Description: In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47356
Published: 2023-02-12
Description: In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47357
Published: 2023-02-12
Description: In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47358
Published: 2023-02-12
Description: In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47359
Published: 2023-02-12
Description: In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47360
Published: 2023-02-12
Description: In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47361
Published: 2023-02-12
Description: In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47363
Published: 2023-02-12
Description: In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47364
Published: 2023-02-12
Description: In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47365
Published: 2023-02-12
Description: In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47366
Published: 2023-02-12
Description: In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47367
Published: 2023-02-12
Description: In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-200
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47368
Published: 2023-02-12
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47369
Published: 2023-02-12
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47370
Published: 2023-02-12
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47371
Published: 2023-02-12
Description: In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47450
Published: 2023-02-12
Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47451
Published: 2023-02-12
Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-47452
Published: 2023-02-12
Description: In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]31134210
CVE: CVE-2022-4557
Published: 2023-02-12
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.This issue affects Smartpower Web: before 23.01.01.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0066; https://www.usom.gov.tr/bildirim/tr-23-0066
CVE: CVE-2023-0661
Published: 2023-02-12
Description: Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.



CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://devolutions.net/security/advisories/DEVO-2023-0002; https://devolutions.net/security/advisories/DEVO-2023-0002
CVE: CVE-2023-20076
Published: 2023-02-12
Description: A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an application. An attacker could exploit this vulnerability by deploying and activating an application in the Cisco IOx application hosting environment with a crafted activation payload file. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying host operating system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-233, CWE-78
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-8whGn5dL; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-8whGn5dL
CVE: CVE-2023-0784
Published: 2023-02-12
Description: A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220644.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://vuldb.com/?ctiid.220644; https://vuldb.com/?id.220644; https://youtu.be/V62MSWhLGL4
CVE: CVE-2023-0785
Published: 2023-02-12
Description: A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220645 was assigned to this vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-202
References: https://vuldb.com/?ctiid.220645; https://vuldb.com/?id.220645; https://youtu.be/n_BfBlsUIN8
CVE: CVE-2015-10078
Published: 2023-02-12
Description: A vulnerability, which was classified as problematic, has been found in atwellpub Resend Welcome Email Plugin 1.0.1 on WordPress. This issue affects the function send_welcome_email_url of the file resend-welcome-email.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. The identifier of the patch is b14c1f66d307783f0ae74f88088a[PII_REDACTED]5c. It is recommended to upgrade the affected component. The identifier VDB-220637 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/atwellpub/resend-welcome-email/commit/b14c1f66d307783f0ae74f88088a[PII_REDACTED]5c; https://github.com/atwellpub/resend-welcome-email/pull/1; https://vuldb.com/?ctiid.220637
CVE: CVE-2019-25102
Published: 2023-02-12
Description: A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown function of the file simple-markdown.js. The manipulation with the input <<<<<<<<<<:/:/:/:/:/:/:/:/:/:/ leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.6.1 is able to address this issue. The patch is identified as 015a719bf5cdc561feea05500ecb3274ef609cd2. It is recommended to upgrade the affected component. VDB-220638 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://github.com/ariabuckles/simple-markdown/commit/015a719bf5cdc561feea05500ecb3274ef609cd2; https://github.com/ariabuckles/simple-markdown/pull/73; https://github.com/ariabuckles/simple-markdown/releases/tag/0.6.1
CVE: CVE-2023-0786
Published: 2023-02-12
Description: Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 8.4 (HIGH)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/ce676eb9e9d8cb7864f36ee124e838b1ad15415f; https://huntr.dev/bounties/8c74ccab-0d1d-4c6b-a0fa-803aa65de04f; https://github.com/thorsten/phpmyfaq/commit/ce676eb9e9d8cb7864f36ee124e838b1ad15415f
CVE: CVE-2023-0787
Published: 2023-02-12
Description: Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/b76d58321a7a595eeaf4f7a30403ca6cd8506612; https://huntr.dev/bounties/87397c71-7b84-4617-a66e-fa6c73be9024; https://github.com/thorsten/phpmyfaq/commit/b76d58321a7a595eeaf4f7a30403ca6cd8506612
CVE: CVE-2023-0788
Published: 2023-02-12
Description: Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://github.com/thorsten/phpmyfaq/commit/77b42b9d0be3990ee7389207a71528b304b03039; https://huntr.dev/bounties/808d5452-607c-4af1-812f-26c49faf3e61; https://github.com/thorsten/phpmyfaq/commit/77b42b9d0be3990ee7389207a71528b304b03039
CVE: CVE-2023-0789
Published: 2023-02-12
Description: Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 8.1 (HIGH)
CWE: CWE-77
References: https://github.com/thorsten/phpmyfaq/commit/40515c74815ace394ab23c6c19cbb33fd49059cb; https://huntr.dev/bounties/d9375178-2f23-4f5d-88bd-bba3d6ba7cc5; https://github.com/thorsten/phpmyfaq/commit/40515c74815ace394ab23c6c19cbb33fd49059cb
CVE: CVE-2023-0790
Published: 2023-02-12
Description: Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 7.6 (HIGH)
CWE: CWE-248
References: https://github.com/thorsten/phpmyfaq/commit/f34d84dfe551ecdd675916e45cc0606e04a0734e; https://huntr.dev/bounties/06af150b-b481-4248-9a48-56ded2814156; https://github.com/thorsten/phpmyfaq/commit/f34d84dfe551ecdd675916e45cc0606e04a0734e
CVE: CVE-2023-0791
Published: 2023-02-12
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/26663efcb0b67e421e4ecccad8f19e7106bb03ce; https://huntr.dev/bounties/7152b340-c6f3-4ac8-9f62-f764a267488d; https://github.com/thorsten/phpmyfaq/commit/26663efcb0b67e421e4ecccad8f19e7106bb03ce
CVE: CVE-2023-0792
Published: 2023-02-12
Description: Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://github.com/thorsten/phpmyfaq/commit/d8964568d69488de02f0a0a58acc822eeb5c3cb1; https://huntr.dev/bounties/9e21156b-ab1d-4c60-88ef-8c9f3e2feb7f; https://github.com/thorsten/phpmyfaq/commit/d8964568d69488de02f0a0a58acc822eeb5c3cb1
CVE: CVE-2023-0793
Published: 2023-02-12
Description: Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 7.1 (HIGH)
CWE: CWE-521, CWE-521
References: https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd[PII_REDACTED]60f9547; https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9; https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd[PII_REDACTED]60f9547
CVE: CVE-2023-0794
Published: 2023-02-12
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.


CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/edf0f6f90d4deaf46b4fd97ae92f16c1e10a2635; https://huntr.dev/bounties/949975f1-271d-46aa-85e5-1a013cdb5efb; https://github.com/thorsten/phpmyfaq/commit/edf0f6f90d4deaf46b4fd97ae92f16c1e10a2635
CVE: CVE-2019-25103
Published: 2023-02-12
Description: A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. Upgrading to version 0.5.2 is able to address this issue. The patch is named 89797fef9abb4cab2fb76a335968266a92588816. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220639.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://github.com/ariabuckles/simple-markdown/commit/89797fef9abb4cab2fb76a335968266a92588816; https://github.com/ariabuckles/simple-markdown/releases/tag/0.5.2; https://vuldb.com/?ctiid.220639
CVE: CVE-2020-36661
Published: 2023-02-12
Description: A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function is_header of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this issue. The patch is identified as d632e5df43a2928fd537784a99a79dec288bf01b. It is recommended to upgrade the affected component. VDB-220642 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-1333
References: https://github.com/Kong/lua-multipart/commit/d632e5df43a2928fd537784a99a79dec288bf01b; https://github.com/Kong/lua-multipart/pull/34; https://github.com/Kong/lua-multipart/releases/tag/0.5.9-1
CVE: CVE-2023-0680
Published: 2023-02-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-43460
Published: 2023-02-13
Description: Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-522
References: https://jvn.jp/en/jp/JVN22830348/; https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html; https://jvn.jp/en/jp/JVN22830348/
CVE: CVE-2023-22345
Published: 2023-02-13
Description: Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process when out of specification errors are detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://jvn.jp/en/vu/JVNVU98917488/; https://www.electronics.jtekt.co.jp/en/topics/[PII_REDACTED]33/; https://www.electronics.jtekt.co.jp/jp/topics/[PII_REDACTED]454/