deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-0681
Published: 2023-03-20
Description: Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s choice using the ‘page’ parameter of the ‘data/console/redirect’ component of the application. This issue was resolved in the February, 2023 release of version 6.6.179. 


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://docs.rapid7.com/release-notes/nexpose/20230208/; https://docs.rapid7.com/release-notes/nexpose/20230208/
CVE: CVE-2023-27578
Published: 2023-03-20
Description: Galaxy is an open-source platform for data analysis. All supported versions of Galaxy are affected prior to 22.01, 22.05, and 23.0 are affected by an insufficient permission check. Unsupported versions are likely affected as far back as the functionality of Visualizations/Pages exists. Due to this issue, an attacker can modify or delete any Galaxy Visualization or Galaxy Page given they know the encoded ID of it. Additionally, they can copy or import any Galaxy Visualization given they know the encoded ID of it. Patches are available for versions 22.01, 22.05, and 23.0. For the changes to take effect, you must restart all Galaxy server processes. There are no supported workarounds.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284, CWE-863, CWE-863
References: https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_22.01.patch; https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_22.05.patch; https://depot.galaxyproject.org/patch/GX-2022-0002/modify_pages_viz-release_23.0.patch
CVE: CVE-2023-28425
Published: 2023-03-20
Description: Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-77, CWE-617
References: https://github.com/redis/redis/commit/48e0d[PII_REDACTED]b47892fe9f3d91be7687f25c9; https://github.com/redis/redis/releases/tag/7.0.10; https://github.com/redis/redis/security/advisories/GHSA-mvmm-4vq6-vw8c
CVE: CVE-2022-43663
Published: 2023-03-20
Description: An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-195, CWE-681
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1674; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1674; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1674
CVE: CVE-2022-45124
Published: 2023-03-20
Description: An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-287
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1683; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1683; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1683
CVE: CVE-2012-10009
Published: 2023-03-21
Description: A vulnerability was found in 404like Plugin up to 1.0.2 on WordPress. It has been classified as critical. Affected is the function checkPage of the file 404Like.php. The manipulation of the argument searchWord leads to sql injection. It is possible to launch the attack remotely. Upgrading to version 1.0.2 is able to address this issue. The name of the patch is 2c4b589d27554910ab1fd104ddbec9331b540f7f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-223404.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/wp-plugins/404like/commit/2c4b589d27554910ab1fd104ddbec9331b540f7f; https://github.com/wp-plugins/404like/releases/tag/1.0.2; https://vuldb.com/?ctiid.223404
CVE: CVE-2023-1527
Published: 2023-03-21
Description: Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/tsolucio/corebos/commit/aaaca69185bce2be6a82956c69541938dc871268; https://huntr.dev/bounties/f0272a31-9944-4545-8428-a26154d20348; https://github.com/tsolucio/corebos/commit/aaaca69185bce2be6a82956c69541938dc871268
CVE: CVE-2023-1535
Published: 2023-03-21
Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25; https://huntr.dev/bounties/4d4b0caa-6d8c-4574-ae7e-e9ef5e2e1a40; https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25
CVE: CVE-2023-1536
Published: 2023-03-21
Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25; https://huntr.dev/bounties/538207f4-f805-419a-a[PII_REDACTED]3f05e; https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25
CVE: CVE-2023-1537
Published: 2023-03-21
Description: Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-294
References: https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af; https://huntr.dev/bounties/171cde18-a447-446c-a9ab-297953ad9b86; https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af
CVE: CVE-2023-1538
Published: 2023-03-21
Description: Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-208, CWE-203
References: https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af; https://huntr.dev/bounties/ac0271eb-660f-4966-8b57-4bc660a9a1a0; https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af
CVE: CVE-2023-1539
Published: 2023-03-21
Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307, CWE-307
References: https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af; https://huntr.dev/bounties/b4df67f4-14ea-4051-97d4-26690c979a28; https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af
CVE: CVE-2023-1540
Published: 2023-03-21
Description: Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://github.com/answerdev/answer/commit/1de3ec27e50ba7389c9449c59e8ea3a37a908ee4; https://huntr.dev/bounties/d8d6c259-a0f2-4209-a3b0-ecbf3eb092f4; https://github.com/answerdev/answer/commit/1de3ec27e50ba7389c9449c59e8ea3a37a908ee4
CVE: CVE-2023-1541
Published: 2023-03-21
Description: Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
CVSS Score: 3.8 (LOW)
CWE: CWE-840
References: https://github.com/answerdev/answer/commit/15390adbfcd5fd37af4661f992f8873ae5a6b840; https://huntr.dev/bounties/8fd891c6-b04e-4dac-818f-9ea30861cd92; https://github.com/answerdev/answer/commit/15390adbfcd5fd37af4661f992f8873ae5a6b840
CVE: CVE-2023-1542
Published: 2023-03-21
Description: Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-840
References: https://github.com/answerdev/answer/commit/4ca2429d190a6e614f5bbee1173c80a7cffcc568; https://huntr.dev/bounties/d947417c-5a12-407a-9a2f-fa696f65126f; https://github.com/answerdev/answer/commit/4ca2429d190a6e614f5bbee1173c80a7cffcc568
CVE: CVE-2023-1543
Published: 2023-03-21
Description: Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613, CWE-613
References: https://github.com/answerdev/answer/commit/cd742b75605c99776f32d271c0a60e0f468e181c; https://huntr.dev/bounties/f82388d6-dfc3-4fbc-bea6-eb40cf5b2683; https://github.com/answerdev/answer/commit/cd742b75605c99776f32d271c0a60e0f468e181c
CVE: CVE-2022-41785
Published: 2023-03-21
Description: Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Galleryape Gallery Images Ape plugin <= 2.2.8 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/gallery-images-ape/wordpress-gallery-images-ape-plugin-2-2-8-auth-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gallery-images-ape/wordpress-gallery-images-ape-plugin-2-2-8-auth-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-41831
Published: 2023-03-21
Description: Auth. (contributor+) Cross-Site Scripting vulnerability in TCBarrett WP Glossary plugin <= 3.1.2 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-glossary/wordpress-wp-glossary-plugin-3-1-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-glossary/wordpress-wp-glossary-plugin-3-1-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-42485
Published: 2023-03-21
Description: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin <= 6.0 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/gallery-with-thumbnail-slider/wordpress-gallery-with-thumbnail-slider-plugin-6-0-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gallery-with-thumbnail-slider/wordpress-gallery-with-thumbnail-slider-plugin-6-0-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-27980
Published: 2023-03-21
Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious report file in the IGSS project report directory, this could lead to remote code execution when a victim eventually opens the report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf
CVE: CVE-2023-27982
Published: 2023-03-21
Description: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code execution when a victim eventually opens a malicious dashboard file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
CVSS Score: 8.8 (HIGH)
CWE: CWE-345
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf
CVE: CVE-2023-1462
Published: 2023-03-21
Description: Authorization Bypass Through User-Controlled Key vulnerability in Vadi Corporate Information Systems DigiKent allows Authentication Bypass, Authentication Abuse. This issue affects DigiKent: before 23.03.20.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639, CWE-639
References: https://www.usom.gov.tr/bildirim/tr-23-0161; https://www.usom.gov.tr/bildirim/tr-23-0161
CVE: CVE-2023-27978
Published: 2023-03-21
Description: A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf
CVE: CVE-2023-27981
Published: 2023-03-21
Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf
CVE: CVE-2016-15029
Published: 2023-03-21
Description: A vulnerability has been found in Ydalb mapicoin up to 1.9.0 and classified as problematic. This vulnerability affects unknown code of the file webroot/stats.php. The manipulation of the argument link/search leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.10.0 is able to address this issue. The patch is identified as 67e87f0f0c1ac238fcd050f4c3db298229bc9679. It is recommended to upgrade the affected component. VDB-223402 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Ydalb/mapicoin/commit/67e87f0f0c1ac238fcd050f4c3db298229bc9679; https://vuldb.com/?ctiid.223402; https://vuldb.com/?id.223402
CVE: CVE-2023-1545
Published: 2023-03-21
Description: SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66; https://huntr.dev/bounties/942c015f-7486-49b1-94ae-b1538d812bc2; https://github.com/nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66
CVE: CVE-2023-27984
Published: 2023-03-21
Description: A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens a malicious report file planted by an attacker. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf
CVE: CVE-2023-1153
Published: 2023-03-21
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Pacsrapor: before 1.22.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0163; https://www.usom.gov.tr/bildirim/tr-23-0163
CVE: CVE-2023-1154
Published: 2023-03-21
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pacsrapor allows Reflected XSS.This issue affects Pacsrapor: before 1.22.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.usom.gov.tr/bildirim/tr-23-0163; https://www.usom.gov.tr/bildirim/tr-23-0163
CVE: CVE-2023-1314
Published: 2023-03-21
Description: A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied on a world-writable directory.

An attacker with local access to the device (without Administrator rights) can use symbolic links to trick the MSI installer into deleting files in locations that the attacker would otherwise have no access to. By creating a symlink from the world-writable directory to the target file, the attacker can manipulate the MSI installer's repair functionality to delete the target file during the repair process.

Exploitation of this vulnerability could allow an attacker to delete important system files or replace them with malicious files, potentially leading to the affected device being compromised.

The cloudflared client itself is not affected by this vulnerability, only the installer for 32-bit Windows devices.


CVSS Score: 7.5 (HIGH)
CWE: CWE-59, CWE-59
References: https://github.com/cloudflare/cloudflared/releases; https://github.com/cloudflare/cloudflared/security/advisories/GHSA-7mjv-x3jf-545x; https://github.com/cloudflare/cloudflared/releases
CVE: CVE-2023-27977
Published: 2023-03-21
Description: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory, this could lead to loss of data when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf
CVE: CVE-2022-42331
Published: 2023-03-21
Description: x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.
CVSS Score: 5.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2023/03/21/3; http://xenbits.xen.org/xsa/advisory-429.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/
CVE: CVE-2022-42332
Published: 2023-03-21
Description: x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as auxiliary data structures. To migrate or snapshot guests, Xen additionally runs them in so called log-dirty mode. The data structures needed by the log-dirty tracking are part of aformentioned auxiliary data. In order to keep error handling efforts within reasonable bounds, for operations which may require memory allocations shadow mode logic ensures up front that enough memory is available for the worst case requirements. Unfortunately, while page table memory is properly accounted for on the code path requiring the potential establishing of new shadows, demands by the log-dirty infrastructure were not taken into consideration. As a result, just established shadow page tables could be freed again immediately, while other code is still accessing them on the assumption that they would remain allocated.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2023/03/21/1; http://xenbits.xen.org/xsa/advisory-427.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/
CVE: CVE-2022-42333
Published: 2023-03-21
Description: x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334).
CVSS Score: 8.6 (HIGH)
CWE: CWE-770
References: http://www.openwall.com/lists/oss-security/2023/03/21/2; http://xenbits.xen.org/xsa/advisory-428.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/
CVE: CVE-2022-42334
Published: 2023-03-21
Description: x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://www.openwall.com/lists/oss-security/2023/03/21/2; http://xenbits.xen.org/xsa/advisory-428.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/
CVE: CVE-2023-27979
Published: 2023-03-21
Description: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project report directory, this could lead to denial of service when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf