deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36674
Published: 2022-09-01
Description: Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/view_schedule.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Nujabe4/bug_report/blob/main/vendors/oretnom23/simple-task-scheduler-system/SQLi-3.md; https://github.com/Nujabe4/bug_report/blob/main/vendors/oretnom23/simple-task-scheduler-system/SQLi-3.md
CVE: CVE-2022-36675
Published: 2022-09-01
Description: Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/manage_schedule.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Nujabe4/bug_report/blob/main/vendors/oretnom23/simple-task-scheduler-system/SQLi-2.md; https://github.com/Nujabe4/bug_report/blob/main/vendors/oretnom23/simple-task-scheduler-system/SQLi-2.md
CVE: CVE-2022-36676
Published: 2022-09-01
Description: Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/view_category.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Nujabe4/bug_report/blob/main/vendors/oretnom23/simple-task-scheduler-system/SQLi-1.md; https://github.com/Nujabe4/bug_report/blob/main/vendors/oretnom23/simple-task-scheduler-system/SQLi-1.md
CVE: CVE-2022-3072
Published: 2022-09-01
Description: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/francoisjacquet/rosariosis/commit/dcd3b86156bf9e981944e1a9e01ea23d8ad7c83a; https://huntr.dev/bounties/9755ae6a-b08b-40a0-8089-c723b2d9ca52; https://github.com/francoisjacquet/rosariosis/commit/dcd3b86156bf9e981944e1a9e01ea23d8ad7c83a
CVE: CVE-2022-36052
Published: 2022-09-01
Description: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP header structure at a certain offset in a packet buffer. The code does not check whether the packet buffer is large enough to fit a full UDP header structure from the offset where the casting is made. Hence, it is possible to cause an out-of-bounds read beyond the packet buffer. The problem affects anyone running devices with Contiki-NG versions previous to 4.8, and which may receive 6LoWPAN packets from external parties. The problem has been patched in Contiki-NG version 4.8.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://github.com/contiki-ng/contiki-ng/pull/1648; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-vwr8-6mqv-x7f5; https://github.com/contiki-ng/contiki-ng/pull/1648
CVE: CVE-2022-36053
Published: 2022-09-01
Description: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a buffer module (os/net/ipv6/uipbuf.c) that processes IPv6 extension headers in incoming data packets. As part of this processing, the function uipbuf_get_next_header casts a pointer to a uip_ext_hdr structure into the packet buffer at different offsets where extension headers are expected to be found, and then reads from this structure. Because of a lack of bounds checking, the casting can be done so that the structure extends beyond the packet's end. Hence, with a carefully crafted packet, it is possible to cause the Contiki-NG system to read data outside the packet buffer. A patch that fixes the vulnerability is included in Contiki-NG 4.8.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://github.com/contiki-ng/contiki-ng/pull/1648; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-2j9c-7754-w4cw; https://github.com/contiki-ng/contiki-ng/pull/1648
CVE: CVE-2022-36054
Published: 2022-09-01
Description: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system (file os/net/ipv6/sicslowpan.c) contains an input function that processes incoming packets and copies them into a packet buffer. Because of a missing length check in the input function, it is possible to write outside the packet buffer's boundary. The vulnerability can be exploited by anyone who has the possibility to send 6LoWPAN packets to a Contiki-NG system. In particular, the vulnerability is exposed when sending either of two types of 6LoWPAN packets: an unfragmented packet or the first fragment of a fragmented packet. If the packet is sufficiently large, a subsequent memory copy will cause an out-of-bounds write with data supplied by the attacker.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://github.com/contiki-ng/contiki-ng/pull/1648; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-c36p-vhwg-244c; https://github.com/contiki-ng/contiki-ng/pull/1648
CVE: CVE-2022-36055
Published: 2022-09-01
Description: Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the _strvals_ package that can cause an out of memory panic. The _strvals_ package contains a parser that turns strings in to Go structures. The _strvals_ package converts these strings into structures Go can work with. Some string inputs can cause array data structures to be created causing an out of memory panic. Applications that use the _strvals_ package in the Helm SDK to parse user supplied input can suffer a Denial of Service when that input causes a panic that cannot be recovered from. The Helm Client will panic with input to `--set`, `--set-string`, and other value setting flags that causes an out of memory panic. Helm is not a long running service so the panic will not affect future uses of the Helm client. This issue has been resolved in 3.9.4. SDK users can validate strings supplied by users won't create large arrays causing significant memory usage before passing them to the _strvals_ functions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/helm/helm/releases/tag/v3.9.4; https://github.com/helm/helm/security/advisories/GHSA-7hfp-qfw3-5jxh; https://github.com/helm/helm/releases/tag/v3.9.4
CVE: CVE-2022-38790
Published: 2022-09-01
Description: Weave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a malicious user to inject a javascript: link in the UI. When clicked by a victim user, the script will execute with the victim's permission. The exposure appears in Weave GitOps Enterprise UI via a GitopsCluster dashboard link. An annotation can be added to a GitopsCluster custom resource.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.gitops.weave.works/docs/cluster-management/getting-started/#profiles-and-clusters; https://docs.gitops.weave.works/docs/intro; https://docs.gitops.weave.works/security/cve/enterprise/CVE-2022-38790/index.html
CVE: CVE-2022-37435
Published: 2022-09-01
Description: Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://lists.apache.org/thread/ndblyxr2fdrvjtgbs1bogxgv2cgk7t28; https://lists.apache.org/thread/ndblyxr2fdrvjtgbs1bogxgv2cgk7t28
CVE: CVE-2022-28199
Published: 2022-09-01
Description: NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1284, CWE-20
References: http://www.openwall.com/lists/oss-security/2022/09/06/2; https://nvidia.custhelp.com/app/answers/detail/a_id/5389; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mlx5-jbPCrqD8
CVE: CVE-2022-36355
Published: 2022-09-01
Description: Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <= 3.1 at WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/easy-org-chart/wordpress-easy-org-chart-plugin-3-1-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/easy-org-chart/; https://patchstack.com/database/vulnerability/easy-org-chart/wordpress-easy-org-chart-plugin-3-1-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-36373
Published: 2022-09-01
Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simon Ward MP3 jPlayer plugin <= 2.7.3 at WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/mp3-jplayer/wordpress-mp3-jplayer-plugin-2-7-3-multiple-cross-site-request-forgery-csrf-vulnerabilities; https://wordpress.org/plugins/mp3-jplayer/; https://patchstack.com/database/vulnerability/mp3-jplayer/wordpress-mp3-jplayer-plugin-2-7-3-multiple-cross-site-request-forgery-csrf-vulnerabilities
CVE: CVE-2022-36796
Published: 2022-09-01
Description: Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc. CallRail Phone Call Tracking plugin <= 0.4.9 at WordPress.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://patchstack.com/database/vulnerability/callrail-phone-call-tracking/wordpress-callrail-phone-call-tracking-plugin-0-4-9-cross-site-request-forgery-csrf-vulnerability-leading-to-stored-cross-site-scripting-xss; https://wordpress.org/plugins/callrail-phone-call-tracking/; https://patchstack.com/database/vulnerability/callrail-phone-call-tracking/wordpress-callrail-phone-call-tracking-plugin-0-4-9-cross-site-request-forgery-csrf-vulnerability-leading-to-stored-cross-site-scripting-xss
CVE: CVE-2020-27784
Published: 2022-09-01
Description: A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printer_ioctl() printer_ioctl() tries to access of a printer_dev instance. However, use-after-free arises because it had been freed by gprinter_free().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-201, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e8d5f92b8d30bb4ade76494490c3c065e12411b1; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e8d5f92b8d30bb4ade76494490c3c065e12411b1
CVE: CVE-2020-35525
Published: 2022-09-01
Description: In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.sqlite.org/src/info/a67cf5b7d37d5b14; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-35526
Published: 2022-09-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-35527
Published: 2022-09-01
Description: In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.sqlite.org/src/info/c431b3fd8fd0f6a6; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-35528
Published: 2022-09-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-35529
Published: 2022-09-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-35530
Published: 2022-09-01
Description: In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/LibRaw/LibRaw/commit/11c4db253ef2c9bb44247b578f5caa57c66a1eeb; https://github.com/LibRaw/LibRaw/issues/272; https://lists.debian.org/debian-lts-announce/2022/09/msg00024.html
CVE: CVE-2020-35531
Published: 2022-09-01
Description: In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/LibRaw/LibRaw/commit/d75af00681a74dcc8b929207eb895611a6eceb68; https://github.com/LibRaw/LibRaw/issues/270; https://lists.debian.org/debian-lts-announce/2022/09/msg00024.html
CVE: CVE-2020-35532
Published: 2022-09-01
Description: In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/LibRaw/LibRaw/commit/5ab45b085898e379fedc6b113e2e82a890602b1e; https://github.com/LibRaw/LibRaw/issues/271; https://lists.debian.org/debian-lts-announce/2022/09/msg00024.html
CVE: CVE-2020-35533
Published: 2022-09-01
Description: In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/LibRaw/LibRaw/commit/a6937d4046a7c4742b683a04c8564605fd9be4fb; https://github.com/LibRaw/LibRaw/issues/273; https://lists.debian.org/debian-lts-announce/2022/09/msg00024.html
CVE: CVE-2020-35534
Published: 2022-09-01
Description: In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/LibRaw/LibRaw/commit/e41f331e90b383e3208cefb74e006df44bf3a4b8; https://github.com/LibRaw/LibRaw/issues/279; https://github.com/LibRaw/LibRaw/commit/e41f331e90b383e3208cefb74e006df44bf3a4b8
CVE: CVE-2020-35535
Published: 2022-09-01
Description: In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony.cpp) when processing srf files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/LibRaw/LibRaw/commit/c243f[PII_REDACTED]466c1309bde606815351bee81; https://github.com/LibRaw/LibRaw/issues/283; https://github.com/LibRaw/LibRaw/commit/c243f[PII_REDACTED]466c1309bde606815351bee81
CVE: CVE-2021-45027
Published: 2022-09-01
Description: An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-494
References: https://www.exploit-db.com/exploits/50599; https://www.softlinkint.com/product/oliver/; https://www.exploit-db.com/exploits/50599
CVE: CVE-2022-2996
Published: 2022-09-01
Description: A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html; https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c; https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html
CVE: CVE-2022-36583
Published: 2022-09-01
Description: DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.csdn.net/weixin_45996361/article/details/125882580; https://blog.csdn.net/weixin_45996361/article/details/125882580
CVE: CVE-2022-3061
Published: 2022-09-01
Description: Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git/commit/?id=15cf0b82271b1823fb02ab8c377badba614d95d5; https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html; https://www.debian.org/security/2022/dsa-5257
CVE: CVE-2020-4301
Published: 2022-09-01
Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176609.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/176609; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6615285
CVE: CVE-2021-20468
Published: 2022-09-01
Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 196825.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196825; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6615285
CVE: CVE-2021-29823
Published: 2022-09-01
Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204465.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/204465; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6615285
CVE: CVE-2021-39009
Published: 2022-09-01
Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 213554.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213554; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6615285
CVE: CVE-2021-39045
Published: 2022-09-01
Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on password input fields. IBM X-Force ID: 214345.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/214345; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6615285
CVE: CVE-2022-30614
Published: 2022-09-01
Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 227591.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/227591; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6615285
CVE: CVE-2022-34372
Published: 2022-09-01
Description: Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may potentially alter the docker images leading to a loss of integrity and confidentiality
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-287
References: https://www.dell.com/support/kbdoc/en-us/000201970/dsa-2022-196-dell-emc-cyber-recovery-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000201970/dsa-2022-196-dell-emc-cyber-recovery-security-update-for-multiple-vulnerabilities
CVE: CVE-2022-34379
Published: 2022-09-01
Description: Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.dell.com/support/kbdoc/en-us/000202057/dsa-2022-207-dell-emc-cloudlink-security-update-for-an-ad-users-login-without-password-vulnerability; https://www.dell.com/support/kbdoc/en-us/000202057/dsa-2022-207-dell-emc-cloudlink-security-update-for-an-ad-users-login-without-password-vulnerability
CVE: CVE-2022-34380
Published: 2022-09-01
Description: Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulnerability. A high privileged local attacker may potentially exploit this vulnerability leading to authentication bypass and access the CloudLink system console. This is critical severity vulnerability as it allows attacker to take control of the system.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.dell.com/support/kbdoc/en-us/000202058/dsa-2022-210-dell-emc-cloudlink-security-update-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000202058/dsa-2022-210-dell-emc-cloudlink-security-update-for-multiple-security-vulnerabilities
CVE: CVE-2022-36773
Published: 2022-09-01
Description: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233571.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/233571; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6615285
CVE: CVE-2021-3826
Published: 2022-09-01
Description: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://gcc.gnu.org/git/?p=gcc.git%3Ba=commit%3Bh=[PII_REDACTED]402be6dfee265bd2ff5a4c88e30505; https://gcc.gnu.org/pipermail/gcc-patches/2021-September/579987; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY/
CVE: CVE-2022-1615
Published: 2022-09-01
Description: In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-330, CWE-330
References: https://bugzilla.samba.org/show_bug.cgi?id=15103; https://gitlab.com/samba-team/samba/-/merge_requests/2644; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P/
CVE: CVE-2022-1632
Published: 2022-09-01
Description: An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=2081181; https://bugzilla.redhat.com/show_bug.cgi?id=2081181