deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-39884
Published: 2022-11-09
Description: Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11
CVE: CVE-2022-39885
Published: 2022-11-09
Description: Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11
CVE: CVE-2022-39886
Published: 2022-11-09
Description: Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11
CVE: CVE-2022-39887
Published: 2022-11-09
Description: Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=11
CVE: CVE-2022-39889
Published: 2022-11-09
Description: Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11
CVE: CVE-2022-39890
Published: 2022-11-09
Description: Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11
CVE: CVE-2022-39891
Published: 2022-11-09
Description: Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11
CVE: CVE-2022-39892
Published: 2022-11-09
Description: Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.
CVSS Score: 3.6 (LOW)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11
CVE: CVE-2022-39893
Published: 2022-11-09
Description: Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log access permission to get device identifier data through device log.
CVSS Score: 3.3 (LOW)
CWE: CWE-532, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11
CVE: CVE-2022-41039
Published: 2022-11-09
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41039; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41039
CVE: CVE-2022-41044
Published: 2022-11-09
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41044; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41044
CVE: CVE-2022-41045
Published: 2022-11-09
Description: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41045; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41045
CVE: CVE-2022-41047
Published: 2022-11-09
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41047; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41047
CVE: CVE-2022-41048
Published: 2022-11-09
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41048; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41048
CVE: CVE-2022-41049
Published: 2022-11-09
Description: Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS Score: 5.4 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41049; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41049; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41049
CVE: CVE-2022-41050
Published: 2022-11-09
Description: Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41050; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41050
CVE: CVE-2022-41051
Published: 2022-11-09
Description: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41051; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41051
CVE: CVE-2022-41052
Published: 2022-11-09
Description: Windows Graphics Component Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41052; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41052
CVE: CVE-2022-41053
Published: 2022-11-09
Description: Windows Kerberos Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41053; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41053
CVE: CVE-2022-41054
Published: 2022-11-09
Description: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41054; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41054
CVE: CVE-2022-41055
Published: 2022-11-09
Description: Windows Human Interface Device Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41055; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41055
CVE: CVE-2022-41056
Published: 2022-11-09
Description: Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41056; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41056
CVE: CVE-2022-41057
Published: 2022-11-09
Description: Windows HTTP.sys Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41057; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41057
CVE: CVE-2022-41058
Published: 2022-11-09
Description: Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41058; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41058
CVE: CVE-2022-41060
Published: 2022-11-09
Description: Microsoft Word Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41060; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41060
CVE: CVE-2022-41061
Published: 2022-11-09
Description: Microsoft Word Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41061; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41061
CVE: CVE-2022-41062
Published: 2022-11-09
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41062; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41062
CVE: CVE-2022-41063
Published: 2022-11-09
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41063; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41063
CVE: CVE-2022-41064
Published: 2022-11-09
Description: .NET Framework Information Disclosure Vulnerability
CVSS Score: 5.8 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41064; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41064
CVE: CVE-2022-41066
Published: 2022-11-09
Description: Microsoft Business Central Information Disclosure Vulnerability
CVSS Score: 4.4 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41066; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41066
CVE: CVE-2022-41073
Published: 2022-11-09
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073; http://packetstormsecurity.com/files/174528/Microsoft-Windows-Privilege-Escalation.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073
CVE: CVE-2022-41078
Published: 2022-11-09
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41078; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41078
CVE: CVE-2022-41079
Published: 2022-11-09
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41079; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41079
CVE: CVE-2022-41080
Published: 2022-11-09
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41080; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41080; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41080
CVE: CVE-2022-41085
Published: 2022-11-09
Description: Azure CycleCloud Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41085; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41085
CVE: CVE-2022-41086
Published: 2022-11-09
Description: Windows Group Policy Elevation of Privilege Vulnerability
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41086; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41086
CVE: CVE-2022-41088
Published: 2022-11-09
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41088; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41088
CVE: CVE-2022-41090
Published: 2022-11-09
Description: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41090; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41090
CVE: CVE-2022-41091
Published: 2022-11-09
Description: Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41091; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41091; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41091
CVE: CVE-2022-41092
Published: 2022-11-09
Description: Windows Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41092; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41092
CVE: CVE-2022-41093
Published: 2022-11-09
Description: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41093; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41093
CVE: CVE-2022-41095
Published: 2022-11-09
Description: Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41095; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41095
CVE: CVE-2022-41096
Published: 2022-11-09
Description: Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41096; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41096
CVE: CVE-2022-41097
Published: 2022-11-09
Description: Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41097; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41097
CVE: CVE-2022-41098
Published: 2022-11-09
Description: Windows GDI+ Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41098; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41098
CVE: CVE-2022-41099
Published: 2022-11-09
Description: BitLocker Security Feature Bypass Vulnerability
CVSS Score: 4.6 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099
CVE: CVE-2022-41100
Published: 2022-11-09
Description: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41100; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41100
CVE: CVE-2022-41101
Published: 2022-11-09
Description: Windows Overlay Filter Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41101; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41101
CVE: CVE-2022-41102
Published: 2022-11-09
Description: Windows Overlay Filter Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41102; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41102
CVE: CVE-2022-41103
Published: 2022-11-09
Description: Microsoft Word Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41103; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41103
CVE: CVE-2022-41104
Published: 2022-11-09
Description: Microsoft Excel Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41104; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41104
CVE: CVE-2022-41105
Published: 2022-11-09
Description: Microsoft Excel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41105; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41105
CVE: CVE-2022-41106
Published: 2022-11-09
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41106; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41106
CVE: CVE-2022-41107
Published: 2022-11-09
Description: Microsoft Office Graphics Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41107; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41107
CVE: CVE-2022-41109
Published: 2022-11-09
Description: Windows Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41109; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41109
CVE: CVE-2022-41113
Published: 2022-11-09
Description: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41113; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41113
CVE: CVE-2022-41114
Published: 2022-11-09
Description: Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41114; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41114
CVE: CVE-2022-41116
Published: 2022-11-09
Description: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41116; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41116
CVE: CVE-2022-41118
Published: 2022-11-09
Description: Windows Scripting Languages Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41118; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41118
CVE: CVE-2022-41119
Published: 2022-11-09
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41119; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41119
CVE: CVE-2022-41120
Published: 2022-11-09
Description: Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41120; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41120
CVE: CVE-2022-41122
Published: 2022-11-09
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41122; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41122
CVE: CVE-2022-41123
Published: 2022-11-09
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41123; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41123
CVE: CVE-2022-41125
Published: 2022-11-09
Description: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41125
CVE: CVE-2022-41128
Published: 2022-11-09
Description: Windows Scripting Languages Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41128
CVE: CVE-2022-44244
Published: 2022-11-09
Description: An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://gist.github.com/cai-niao98/58c[PII_REDACTED]8bd73a73d56adf44c4c; https://github.com/cai-niao98/lin-cms/; https://gist.github.com/cai-niao98/58c[PII_REDACTED]8bd73a73d56adf44c4c
CVE: CVE-2022-44590
Published: 2022-11-09
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in James Lao's Simple Video Embedder plugin <= 2.2 on WordPress.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/simple-video-embedder/wordpress-simple-video-embedder-plugin-2-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://wordpress.org/plugins/simple-video-embedder/; https://patchstack.com/database/vulnerability/simple-video-embedder/wordpress-simple-video-embedder-plugin-2-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-2761
Published: 2022-11-09
Description: An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to use GitLab Flavored Markdown (GFM) references in a Jira issue to disclose the names of resources they don't have access to.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2761.json; https://gitlab.com/gitlab-org/gitlab/-/issues/370458; https://hackerone.com/reports/1653149
CVE: CVE-2022-39307
Published: 2022-11-09
Description: Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is made to the `/api/user/password/sent-reset-email` URL. When the username or email does not exist, a JSON response contains a “user not found” message. This leaks information to unauthenticated users and introduces a security risk. This issue has been patched in 9.2.4 and backported to 8.5.15. There are no known workarounds.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-200, CWE-209
References: https://github.com/grafana/grafana/security/advisories/GHSA-3p62-42x7-gxg5; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/grafana/grafana/security/advisories/GHSA-3p62-42x7-gxg5
CVE: CVE-2022-3265
Published: 2022-11-09
Description: A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. It was possible to exploit a vulnerability in setting the labels colour feature which could lead to a stored XSS that allowed attackers to perform arbitrary actions on behalf of victims at client side.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3265.json; https://gitlab.com/gitlab-org/gitlab/-/issues/374976; https://hackerone.com/reports/1693150
CVE: CVE-2022-3280
Published: 2022-11-09
Description: An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick users into visiting a trustworthy URL and being redirected to arbitrary content.
CVSS Score: 3.5 (LOW)
CWE: CWE-601, CWE-601
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3280.json; https://gitlab.com/gitlab-org/gitlab/-/issues/352611; https://hackerone.com/reports/1475686