deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31089
Published: 2022-06-27
Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability impact may be low; if you are running Parse Server as single instance without redundancy, the availability impact may be high. This issue has been addressed in versions 4.10.12 and 5.2.3. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252, CWE-706
References: https://github.com/parse-community/parse-server/commit/5be375dec2fa35425c1003ae81c55995ac72af92; https://github.com/parse-community/parse-server/security/advisories/GHSA-xw6g-jjvf-wwf9; https://github.com/parse-community/parse-server/commit/5be375dec2fa35425c1003ae81c55995ac72af92
CVE: CVE-2022-31094
Published: 2022-06-27
Description: ScratchTools is a web extension designed to make interacting with the Scratch programming language community (Scratching) easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The issue is that if a user visits a project that includes Javascript in the title, then when the Recently Viewed Projects feature displays it, it could run the Javascript. This issue has been addressed in the 2.5.2 release. Users having issues scratching should open an issue in the project issue tracker https://github.com/STForScratch/ScratchTools/
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/STForScratch/ScratchTools/commit/a29a0c6105bc14a89d25c806f6a3ad1257bbb683; https://github.com/STForScratch/ScratchTools/releases/tag/v2.5.2; https://github.com/STForScratch/ScratchTools/security/advisories/GHSA-6r45-jjw6-q39x
CVE: CVE-2022-33005
Published: 2022-06-27
Description: A cross-site scripting (XSS) vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZhuoNiBa/Delta-DIAEnergie-XSS; https://github.com/ZhuoNiBa/Delta-DIAEnergie-XSS
CVE: CVE-2022-33116
Published: 2022-06-27
Description: An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka openeclass) v3.12.4 and below allows attackers to read arbitrary files via a directory traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://emaragkos.gr/gunet-open-eclass-authenticated-path-traversal/; https://github.com/gunet/openeclass; https://hg.gunet.gr/openeclass/diff/cbfc90094d51/modules/mindmap/index.php
CVE: CVE-2017-20103
Published: 2022-06-27
Description: A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument order_by/order with the input ASC%2c(select*from(select(sleep(2)))a) leads to sql injection (Blind). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.9 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: http://seclists.org/fulldisclosure/2017/Feb/67; https://vuldb.com/?id.97335; http://seclists.org/fulldisclosure/2017/Feb/67
CVE: CVE-2022-31090
Published: 2022-06-27
Description: Guzzle, an extensible PHP HTTP client. `Authorization` headers on requests are sensitive information. In affected versions when using our Curl handler, it is possible to use the `CURLOPT_HTTPAUTH` option to specify an `Authorization` header. On making a request which responds with a redirect to a URI with a different origin (change in host, scheme or port), if we choose to follow it, we should remove the `CURLOPT_HTTPAUTH` option before continuing, stopping curl from appending the `Authorization` header to the new request. Affected Guzzle 7 users should upgrade to Guzzle 7.4.5 as soon as possible. Affected users using any earlier series of Guzzle should upgrade to Guzzle 6.5.8 or 7.4.5. Note that a partial fix was implemented in Guzzle 7.4.2, where a change in host would trigger removal of the curl-added Authorization header, however this earlier fix did not cover change in scheme or change in port. If you do not require or expect redirects to be followed, one should simply disable redirects all together. Alternatively, one can specify to use the Guzzle steam handler backend, rather than curl.
CVSS Score: 7.7 (HIGH)
CWE: CWE-200, CWE-212
References: https://github.com/guzzle/guzzle/commit/1dd98b0564cb3f6bd16ce683cb755f94c10fbd82; https://github.com/guzzle/guzzle/security/advisories/GHSA-25mq-v84q-4j7r; https://security.gentoo.org/glsa/202305-24
CVE: CVE-2022-31091
Published: 2022-06-27
Description: Guzzle, an extensible PHP HTTP client. `Authorization` and `Cookie` headers on requests are sensitive information. In affected versions on making a request which responds with a redirect to a URI with a different port, if we choose to follow it, we should remove the `Authorization` and `Cookie` headers from the request, before containing. Previously, we would only consider a change in host or scheme. Affected Guzzle 7 users should upgrade to Guzzle 7.4.5 as soon as possible. Affected users using any earlier series of Guzzle should upgrade to Guzzle 6.5.8 or 7.4.5. Note that a partial fix was implemented in Guzzle 7.4.2, where a change in host would trigger removal of the curl-added Authorization header, however this earlier fix did not cover change in scheme or change in port. An alternative approach would be to use your own redirect middleware, rather than ours, if you are unable to upgrade. If you do not require or expect redirects to be followed, one should simply disable redirects all together.
CVSS Score: 7.7 (HIGH)
CWE: CWE-200
References: https://github.com/guzzle/guzzle/commit/1dd98b0564cb3f6bd16ce683cb755f94c10fbd82; https://github.com/guzzle/guzzle/security/advisories/GHSA-q559-8m2m-g699; https://security.gentoo.org/glsa/202305-24
CVE: CVE-2022-31092
Published: 2022-06-27
Description: Pimcore is an Open Source Data & Experience Management Platform. Pimcore offers developers listing classes to make querying data easier. This listing classes also allow to order or group the results based on one or more columns which should be quoted by default. The actual issue is that quoting is not done properly in both cases, so there's the theoretical possibility to inject custom SQL if the developer is using this methods with input data and not doing proper input validation in advance and so relies on the auto-quoting being done by the listing classes. This issue has been resolved in version 10.4.4. Users are advised to upgrade or to apple the patch manually. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/pimcore/pimcore/commit/21559c6bf0e4e828d33ff7af6e88caecb5ac6549; https://github.com/pimcore/pimcore/pull/12444; https://github.com/pimcore/pimcore/security/advisories/GHSA-gvmf-wcx6-p974
CVE: CVE-2022-31093
Published: 2022-06-27
Description: NextAuth.js is a complete open source authentication solution for Next.js applications. In affected versions an attacker can send a request to an app using NextAuth.js with an invalid `callbackUrl` query parameter, which internally is converted to a `URL` object. The URL instantiation would fail due to a malformed URL being passed into the constructor, causing it to throw an unhandled error which led to the **API route handler timing out and logging in to fail**. This has been remedied in versions 3.29.5 and 4.5.0. If for some reason you cannot upgrade, the workaround requires you to rely on Advanced Initialization. Please see the documentation for more.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://github.com/nextauthjs/next-auth/commit/25517b73153332d948114bacdff3b5908de91d85; https://github.com/nextauthjs/next-auth/commit/e498483b23273d1bfc81be68339607f88d411bd6; https://github.com/nextauthjs/next-auth/security/advisories/GHSA-g5fm-jp9v-2432
CVE: CVE-2022-31096
Published: 2022-06-27
Description: Discourse is an open source discussion platform. Under certain conditions, a logged in user can redeem an invite with an email that either doesn't match the invite's email or does not adhere to the email domain restriction of an invite link. The impact of this flaw is aggravated when the invite has been configured to add the user that accepts the invite into restricted groups. Once a user has been incorrectly added to a restricted group, the user may then be able to view content which that are restricted to the respective group. Users are advised to upgrade to the current stable releases. There are no known workarounds to this issue.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-281, CWE-281
References: https://github.com/discourse/discourse/security/advisories/GHSA-rvp8-459h-282r; https://github.com/discourse/discourse/security/advisories/GHSA-rvp8-459h-282r
CVE: CVE-2022-31098
Published: 2022-06-27
Description: Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in the logging of Weave GitOps could allow an authenticated remote attacker to view sensitive cluster configurations, aka KubeConfg, of registered Kubernetes clusters, including the service account tokens in plain text from Weave GitOps's pod logs on the management cluster. An unauthorized remote attacker can also view these sensitive configurations from external log storage if enabled by the management cluster. This vulnerability is due to the client factory dumping cluster configurations and their service account tokens when the cluster manager tries to connect to an API server of a registered cluster, and a connection error occurs. An attacker could exploit this vulnerability by either accessing logs of a pod of Weave GitOps, or from external log storage and obtaining all cluster configurations of registered clusters. A successful exploit could allow the attacker to use those cluster configurations to manage the registered Kubernetes clusters. This vulnerability has been fixed by commit 567356f471353fb5c676c77f5abc2a04631d50ca. Users should upgrade to Weave GitOps core version v0.8.1-rc.6 or newer. There is no known workaround for this vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-532
References: https://github.com/weaveworks/weave-gitops/commit/567356f471353fb5c676c77f5abc2a04631d50ca; https://github.com/weaveworks/weave-gitops/security/advisories/GHSA-xggc-qprg-x6mw; https://github.com/weaveworks/weave-gitops/commit/567356f471353fb5c676c77f5abc2a04631d50ca
CVE: CVE-2022-31100
Published: 2022-06-27
Description: rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial of Service attack. This happens when the expression contains a multi-byte UTF-8 code point in a string literal or after a backslash, because rulex tries to slice into the code point and panics as a result. This is a security concern for you, if your service parses untrusted rulex expressions (expressions provided by an untrusted user), and your service becomes unavailable when the thread running rulex panics. The crashes are fixed in version **0.4.3**. Affected users are advised to update to this version. The only known workaround for this issue is to assume that regular expression parsing will panic and to add logic to catch panics.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/rulex-rs/rulex/commit/fac6d58b25c6f9f8c0a6cdc4dec75b37b219f1d6; https://github.com/rulex-rs/rulex/security/advisories/GHSA-8v9w-p43c-r885; https://github.com/rulex-rs/rulex/commit/fac6d58b25c6f9f8c0a6cdc4dec75b37b219f1d6
CVE: CVE-2022-32092
Published: 2022-06-27
Description: D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/fxc233/iot-vul/tree/main/D-Link/DIR-645; https://www.dlink.com/en/security-bulletin/; https://github.com/fxc233/iot-vul/tree/main/D-Link/DIR-645
CVE: CVE-2022-33007
Published: 2022-06-27
Description: TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function genacgi_main.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/fxc233/CVE/blob/main/bufferoverflow.md; https://github.com/fxc233/CVE/blob/main/bufferoverflow.md
CVE: CVE-2022-33879
Published: 2022-06-27
Description: The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1.
CVSS Score: 3.3 (LOW)
References: http://www.openwall.com/lists/oss-security/2022/06/27/5; https://lists.apache.org/thread/wfno8mf5nlcvbs78z93q9thgrm30wwfh; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-31099
Published: 2022-06-27
Description: rulex is a new, portable, regular expression language. When parsing untrusted rulex expressions, the stack may overflow, possibly enabling a Denial of Service attack. This happens when parsing an expression with several hundred levels of nesting, causing the process to abort immediately. This is a security concern for you, if your service parses untrusted rulex expressions (expressions provided by an untrusted user), and your service becomes unavailable when the process running rulex aborts due to a stack overflow. The crash is fixed in version **0.4.3**. Affected users are advised to update to this version. There are no known workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/rulex-rs/rulex/commit/60aa2dc03a22d69c8800fec81f99c96958a11363; https://github.com/rulex-rs/rulex/security/advisories/GHSA-v78m-2q7v-fjqp; https://github.com/rulex-rs/rulex/commit/60aa2dc03a22d69c8800fec81f99c96958a11363
CVE: CVE-2022-31101
Published: 2022-06-27
Description: prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/168003/Prestashop-Blockwishlist-2.1.0-SQL-Injection.html; https://github.com/PrestaShop/blockwishlist/commit/b3ec4b85af5fd73f74d55390b226d221298ca084; https://github.com/PrestaShop/blockwishlist/security/advisories/GHSA-2jx3-5j9v-prpp
CVE: CVE-2022-31103
Published: 2022-06-27
Description: lettersanitizer is a DOM-based HTML email sanitizer for in-browser email rendering. All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule `@keyframes`. This package is depended on by [react-letter](https://github.com/mat-sz/react-letter), therefore everyone using react-letter is also at risk. The problem has been patched in version 1.0.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://github.com/mat-sz/lettersanitizer/commit/96d3dfe2ef0465d47324ed4d13e91ba0816a173f; https://github.com/mat-sz/lettersanitizer/security/advisories/GHSA-7r3r-gq8p-v9jj; https://github.com/mat-sz/react-letter/issues/17
CVE: CVE-2022-32994
Published: 2022-06-27
Description: Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/zongdeiqianxing/cve-reports/issues/1; https://github.com/zongdeiqianxing/cve-reports/issues/1
CVE: CVE-2022-32995
Published: 2022-06-27
Description: Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/zongdeiqianxing/cve-reports/issues/2; https://github.com/zongdeiqianxing/cve-reports/issues/2
CVE: CVE-2022-33009
Published: 2022-06-27
Description: A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://lightcms.com; https://github.com/eddy8/LightCMS; https://github.com/eddy8/LightCMS/issues/30
CVE: CVE-2022-31104
Published: 2022-06-28
Description: Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contained two distinct bugs in the instruction lowerings implemented in Cranelift. The aarch64 implementation of the simd proposal is not affected. The bugs were presented in the `i8x16.swizzle` and `select` WebAssembly instructions. The `select` instruction is only affected when the inputs are of `v128` type. The correspondingly affected Cranelift instructions were `swizzle` and `select`. The `swizzle` instruction lowering in Cranelift erroneously overwrote the mask input register which could corrupt a constant value, for example. This means that future uses of the same constant may see a different value than the constant itself. The `select` instruction lowering in Cranelift wasn't correctly implemented for vector types that are 128-bits wide. When the condition was 0 the wrong instruction was used to move the correct input to the output of the instruction meaning that only the low 32 bits were moved and the upper 96 bits of the result were left as whatever the register previously contained (instead of the input being moved from). The `select` instruction worked correctly if the condition was nonzero, however. This bug in Wasmtime's implementation of these instructions on x86_64 represents an incorrect implementation of the specified semantics of these instructions according to the WebAssembly specification. The impact of this is benign for hosts running WebAssembly but represents possible vulnerabilities within the execution of a guest program. For example a WebAssembly program could take unintended branches or materialize incorrect values internally which runs the risk of exposing the program itself to other related vulnerabilities which can occur from miscompilations. We have released Wasmtime 0.38.1 and cranelift-codegen (and other associated cranelift crates) 0.85.1 which contain the corrected implementations of these two instructions in Cranelift. If upgrading is not an option for you at this time, you can avoid the vulnerability by disabling the Wasm simd proposal. Additionally the bug is only present on x86_64 hosts. Other aarch64 hosts are not affected. Note that s390x hosts don't yet implement the simd proposal and are not affected.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-682
References: https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_simd; https://github.com/bytecodealliance/wasmtime/pull/4317; https://github.com/bytecodealliance/wasmtime/pull/4318
CVE: CVE-2022-34132
Published: 2022-06-28
Description: Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/bbalet/jorani/commit/c5c42e29e6a9e59a3c82450bef48b67b8dd48333; https://github.com/bbalet/jorani/issues/369; https://github.com/bbalet/jorani/commit/c5c42e29e6a9e59a3c82450bef48b67b8dd48333
CVE: CVE-2022-34133
Published: 2022-06-28
Description: Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Comment parameter at application/controllers/Leaves.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bbalet/jorani/commit/3d01cef4ee9cdd70cfe1ac4fd7f5d607dda0d0ca; https://github.com/bbalet/jorani/issues/369; https://github.com/bbalet/jorani/commit/3d01cef4ee9cdd70cfe1ac4fd7f5d607dda0d0ca
CVE: CVE-2022-34134
Published: 2022-06-28
Description: Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /application/controllers/Users.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/bbalet/jorani/commit/299b5a3a66add4ac643e3ba78ada4d9637c8baff; https://github.com/bbalet/jorani/issues/369; https://github.com/bbalet/jorani/commit/299b5a3a66add4ac643e3ba78ada4d9637c8baff
CVE: CVE-2017-20104
Published: 2022-06-28
Description: A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWA_SID leads to sql injection (Time). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: http://seclists.org/bugtraq/2017/Feb/39; https://vuldb.com/?id.97252; http://seclists.org/bugtraq/2017/Feb/39
CVE: CVE-2017-20105
Published: 2022-06-28
Description: A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument path with the input ..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://seclists.org/bugtraq/2017/Feb/40; https://vuldb.com/?id.97253; http://seclists.org/bugtraq/2017/Feb/40
CVE: CVE-2017-20106
Published: 2022-06-28
Description: A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument upload_url leads to server-side request forgery. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://vuldb.com/?id.97265; https://www.vulnerability-lab.com/get_content.php?id=2030; https://vuldb.com/?id.97265
CVE: CVE-2017-20107
Published: 2022-06-28
Description: A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The manipulation leads to improper privilege management. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1.12 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269, CWE-269
References: http://seclists.org/fulldisclosure/2017/Feb/28; https://vuldb.com/?id.97122; http://seclists.org/fulldisclosure/2017/Feb/28
CVE: CVE-2022-0624
Published: 2022-06-28
Description: Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.
CVSS Score: 7.3 (HIGH)
CWE: CWE-639
References: https://github.com/ionicabizau/parse-path/commit/f9ad8856a3c8ae18e1cf4caef5edbabbc42840e8; https://huntr.dev/bounties/afffb2bd-fb06-4144-829e-ecbbcbc85388; https://github.com/ionicabizau/parse-path/commit/f9ad8856a3c8ae18e1cf4caef5edbabbc42840e8
CVE: CVE-2021-40606
Published: 2022-06-28
Description: The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/gpac/gpac/issues/1885; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/1885