deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30944
Published: 2022-08-18
Description: Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00709.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-32579
Published: 2022-08-18
Description: Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-665, CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE: CVE-2022-33209
Published: 2022-08-18
Description: Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE: CVE-2022-34345
Published: 2022-08-18
Description: Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE: CVE-2022-34488
Published: 2022-08-18
Description: Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE: CVE-2022-36947
Published: 2022-08-18
Description: Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://wid.cert-bund.de/portal/wid/kurzinformationen; https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0883; https://www.faststone.org/FSViewerDetail.htm
CVE: CVE-2020-36599
Published: 2022-08-18
Description: lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: https://github.com/omniauth/omniauth/commit/43a396f181ef7d0ed2ec8291c939c95e3ed3ff00#diff-575abda9deb9b1a77bf534e898a923029b9a61e991d626db88dc6e8b34260aa2; https://rubygems.org/gems/omniauth/versions/1.9.2; https://github.com/omniauth/omniauth/commit/43a396f181ef7d0ed2ec8291c939c95e3ed3ff00#diff-575abda9deb9b1a77bf534e898a923029b9a61e991d626db88dc6e8b34260aa2
CVE: CVE-2022-35540
Published: 2022-08-18
Description: Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/dotnetcore/AgileConfig/issues/91; https://github.com/dotnetcore/AgileConfig/issues/91
CVE: CVE-2020-23466
Published: 2022-08-19
Description: Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/; https://www.exploit-db.com/exploits/48522; https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/
CVE: CVE-2022-35167
Published: 2022-08-19
Description: Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://printix.com; http://printixnet.com; https://www.pentagrid.ch/en/blog/vulnerabilities-in-printix-cloud-print-management/
CVE: CVE-2022-1901
Published: 2022-08-19
Description: In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: https://advisories.octopus.com/post/2022/sa2022-09/; https://advisories.octopus.com/post/2022/sa2022-09/
CVE: CVE-2022-2049
Published: 2022-08-19
Description: In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.
CVSS Score: 7.5 (HIGH)
References: https://advisories.octopus.com/post/2022/sa2022-10/; https://advisories.octopus.com/post/2022/sa2022-10/
CVE: CVE-2022-2074
Published: 2022-08-19
Description: In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template.
CVSS Score: 7.5 (HIGH)
References: https://advisories.octopus.com/post/2022/sa2022-11/; https://advisories.octopus.com/post/2022/sa2022-11/
CVE: CVE-2022-2075
Published: 2022-08-19
Description: In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation.
CVSS Score: 7.5 (HIGH)
References: https://advisories.octopus.com/post/2022/sa2022-12/; https://advisories.octopus.com/post/2022/sa2022-12/
CVE: CVE-2022-2886
Published: 2022-08-19
Description: A vulnerability, which was classified as critical, was found in Laravel 5.1. Affected is an unknown function. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-206688.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://github.com/beicheng-maker/vulns/issues/3; https://vuldb.com/?id.206688; https://github.com/beicheng-maker/vulns/issues/3
CVE: CVE-2022-1021
Published: 2022-08-19
Description: Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-922, CWE-79
References: https://github.com/chatwoot/chatwoot/commit/24b20c10cebd25e61de8d4266c63fde94772e889; https://huntr.dev/bounties/a8187478-75e1-4d62-b[PII_REDACTED]01ca3; https://github.com/chatwoot/chatwoot/commit/24b20c10cebd25e61de8d4266c63fde94772e889
CVE: CVE-2022-29805
Published: 2022-08-19
Description: A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.fishbowlinventory.com; https://www.whiteoaksecurity.com/blog/fishbowl-disclosure-cve-2022-29805/; https://www.fishbowlinventory.com
CVE: CVE-2022-2889
Published: 2022-08-19
Description: Use After Free in GitHub repository vim/vim prior to 9.0.0225.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/vim/vim/commit/91c7cbfe31bbef57d5fcf7d76989fc159f73ef15; https://huntr.dev/bounties/d1ac9817-825d-49ce-b514-1d5b12b6bdaa; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/
CVE: CVE-2022-35909
Published: 2022-08-19
Description: In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.
CVSS Score: 8.8 (HIGH)
References: https://docs.google.com/document/d/1cBXQrokCvWxKET4BKi3ZLtVp5gst6-MrGPgMKpfXw8Y/edit; https://github.com/jellyfin/jellyfin/pull/7569/files; https://medium.com/stolabs/cve-2022-35909-cve-2022-35910-incorrect-access-control-and-xss-stored-to-jellyfin-967359c91058
CVE: CVE-2022-35910
Published: 2022-08-19
Description: In Jellyfin before 10.8, stored XSS allows theft of an admin access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.google.com/document/d/1cBXQrokCvWxKET4BKi3ZLtVp5gst6-MrGPgMKpfXw8Y/edit; https://github.com/jellyfin/jellyfin/pull/7569/files; https://medium.com/stolabs/cve-2022-35909-cve-2022-35910-incorrect-access-control-and-xss-stored-to-jellyfin-967359c91058
CVE: CVE-2022-36220
Published: 2022-08-19
Description: Kiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/SafeExamBrowser/seb-win-refactoring/issues/434; https://safeexambrowser.org/windows/win_release_notes_en.html; https://github.com/SafeExamBrowser/seb-win-refactoring/issues/434
CVE: CVE-2022-34615
Published: 2022-08-19
Description: Mealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain unauthorized access to the application via brute-force attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://cwe.mitre.org/data/definitions/521.html; https://docs.mealie.io/changelog/v0.5.6/; https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
CVE: CVE-2022-34621
Published: 2022-08-19
Description: Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://cwe.mitre.org/data/definitions/639.html; https://docs.mealie.io/changelog/v0.5.6/; https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
CVE: CVE-2022-34623
Published: 2022-08-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32425. Reason: This candidate is a duplicate of CVE-2022-32425. Notes: All CVE users should reference CVE-2022-32425 instead of this candidate.
CVE: CVE-2022-34624
Published: 2022-08-19
Description: Mealie1.0.0beta3 does not terminate download tokens after a user logs out, allowing attackers to perform a man-in-the-middle attack via a crafted GET request.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-613
References: http://hkotel.com; http://mealie.com; https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
CVE: CVE-2022-35201
Published: 2022-08-19
Description: Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: http://124.222.176.39/21f93b5e3b39b22b6df1e6a9c61ed70d54e8378bbeacd844efff921b9a1a8624/index.html; http://tenda-ac18.com; https://www.tendacn.com/default.html
CVE: CVE-2022-36263
Published: 2022-08-19
Description: StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute arbitrary code via a crafted .exe file.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://github.com/ycdxsb/Vuln/blob/main/Streamlabs-CreateProcessW-API-Misuse-Binary-Hijack/; https://github.com/ycdxsb/Vuln/blob/main/Streamlabs-CreateProcessW-API-Misuse-Binary-Hijack/
CVE: CVE-2022-36605
Published: 2022-08-19
Description: Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cloudwebsoft/ywoa/issues/24; https://github.com/cloudwebsoft/ywoa/issues/24
CVE: CVE-2022-36606
Published: 2022-08-19
Description: Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cloudwebsoft/ywoa/issues/25; https://github.com/cloudwebsoft/ywoa/issues/25
CVE: CVE-2022-36224
Published: 2022-08-19
Description: XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/dayrui/xunruicms/issues/1; https://github.com/dayrui/xunruicms/issues/1
CVE: CVE-2022-36225
Published: 2022-08-19
Description: EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management function and add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/weng-xianhu/eyoucms/issues/26; https://github.com/weng-xianhu/eyoucms/issues/26
CVE: CVE-2022-36577
Published: 2022-08-19
Description: An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Cherry-toto/jizhicms/issues/77; https://github.com/Cherry-toto/jizhicms/issues/77
CVE: CVE-2022-36578
Published: 2022-08-19
Description: jizhicms v2.3.1 has SQL injection in the background.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Cherry-toto/jizhicms/issues/78; https://github.com/Cherry-toto/jizhicms/issues/78
CVE: CVE-2022-36579
Published: 2022-08-19
Description: Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/wellcms/wellcms/issues/11; https://github.com/wellcms/wellcms/issues/11
CVE: CVE-2022-37254
Published: 2022-08-19
Description: DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configuration management.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/caiweiming/DolphinPHP/issues/42; https://github.com/caiweiming/DolphinPHP/issues/42
CVE: CVE-2022-0542
Published: 2022-08-19
Description: Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/chatwoot/chatwoot/commit/dd1fe4f93a6fbafa1d1eed87ac7d4143e701ec08; https://huntr.dev/bounties/e6469ba6-03a2-4b17-8b4e-8932ecd0f7ac; https://github.com/chatwoot/chatwoot/commit/dd1fe4f93a6fbafa1d1eed87ac7d4143e701ec08
CVE: CVE-2022-22489
Published: 2022-08-19
Description: IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226339.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/226339; https://www.ibm.com/support/pages/node/6613021; https://exchange.xforce.ibmcloud.com/vulnerabilities/226339
CVE: CVE-2022-23459
Published: 2022-08-19
Description: Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may point to alterable data where the pointer itself is not updated. This issue exists on the current commit of the jsonxx project. The project itself has been archived and updates are not expected. Users are advised to find a replacement.
CVSS Score: 8.1 (HIGH)
CWE: CWE-415, CWE-416, CWE-415, CWE-416
References: https://securitylab.github.com/advisories/GHSL-2022-048_Jsonxx; https://securitylab.github.com/advisories/GHSL-2022-048_Jsonxx
CVE: CVE-2022-23460
Published: 2022-08-19
Description: Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized (ASAN) build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the current commit of the jsonxx project and the project itself has been archived. Updates are not expected. Users are advised to find a replacement.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-121, CWE-674
References: https://securitylab.github.com/advisories/GHSL-2022-049_Jsonxx; https://securitylab.github.com/advisories/GHSL-2022-049_Jsonxx
CVE: CVE-2022-2788
Published: 2022-08-19
Description: Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code.
CVSS Score: 3.9 (LOW)
CWE: CWE-29, CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06
CVE: CVE-2022-36008
Published: 2022-08-19
Description: Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause an overflow panic. No action is needed unless you have a bridge node that needs to distinguish different reversion exit reasons and you used RPC for this. There are currently no known workarounds.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: https://github.com/paritytech/frontier/commit/fff8cc43b7756ce3979a38fc473f38e6e24ac451; https://github.com/paritytech/frontier/pull/820; https://github.com/paritytech/frontier/security/advisories/GHSA-mjvm-mhgc-q4gp
CVE: CVE-2022-36009
Published: 2022-08-19
Description: gomatrixserverlib is a Go library for matrix protocol federation. Dendrite is a Matrix homeserver written in Go, an alternative to Synapse. The power level parsing within gomatrixserverlib was failing to parse the `"events_default"` key of the `m.room.power_levels` event, defaulting the event default power level to zero in all cases. Power levels are the matrix terminology for user access level. In rooms where the `"events_default"` power level had been changed, this could result in events either being incorrectly authorised or rejected by Dendrite servers. gomatrixserverlib contains a fix as of commit `723fd49` and Dendrite 0.9.3 has been updated accordingly. Matrix rooms where the `"events_default"` power level has not been changed from the default of zero are not vulnerable. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-863
References: https://github.com/matrix-org/gomatrixserverlib/commit/723fd495dde835d078b9f2074b6b62c06dea4575; https://github.com/matrix-org/gomatrixserverlib/security/advisories/GHSA-grvv-h2f9-7v9c; https://matrix.org/docs/guides/moderation/#power-levels
CVE: CVE-2022-36031
Published: 2022-08-19
Description: Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user update the `filename_disk` value to a folder and accessing that file through the `/assets` endpoint. This vulnerability has been patched and release v9.15.0 contains the fix. Users are advised to upgrade. Users unable to upgrade may prevent this problem by making sure no (untrusted) non-admin users have permissions to update the `filename_disk` field on `directus_files`.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755
References: https://github.com/directus/directus/security/advisories/GHSA-77qm-wvqq-fg79; https://github.com/directus/directus/security/advisories/GHSA-77qm-wvqq-fg79
CVE: CVE-2022-36170
Published: 2022-08-19
Description: MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://example.com:8082/#/login; https://github.com/prismbreak/vulnerabilities/issues/2; http://example.com:8082/#/login
CVE: CVE-2022-37175
Published: 2022-08-19
Description: Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://drive.google.com/file/d/16hshiCHS8j3YaFPkQD3xajVuwu_QVBe3/view; https://www.cnblogs.com/Amalll/p/16527552.html; https://drive.google.com/file/d/16hshiCHS8j3YaFPkQD3xajVuwu_QVBe3/view
CVE: CVE-2022-36157
Published: 2022-08-19
Description: XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://github.com/Richard-Muzi/vulnerability/issues/1; https://github.com/Richard-Muzi/vulnerability/issues/1
CVE: CVE-2022-36171
Published: 2022-08-19
Description: MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: https://github.com/prismbreak/vulnerabilities/issues/2; https://github.com/prismbreak/vulnerabilities/issues/2
CVE: CVE-2022-36233
Published: 2022-08-19
Description: Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://tenda.com; https://www.cnblogs.com/Amalll/p/16606980.html; http://tenda.com
CVE: CVE-2020-27792
Published: 2022-08-19
Description: A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119, CWE-119
References: https://access.redhat.com/errata/RHSA-2025:4362; https://access.redhat.com/security/cve/CVE-2020-27792; https://bugzilla.redhat.com/show_bug.cgi?id=2247179
CVE: CVE-2020-27793
Published: 2022-08-19
Description: An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-193, CWE-193
References: https://github.com/radareorg/radare2/commit/ced0223c7a1b3b5344af315715cd28fe7c0d9ebc; https://github.com/radareorg/radare2/issues/16304; https://github.com/radareorg/radare2/commit/ced0223c7a1b3b5344af315715cd28fe7c0d9ebc
CVE: CVE-2020-27794
Published: 2022-08-19
Description: A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-415, CWE-415
References: https://github.com/radareorg/radare2/commit/cb8b683758edddae2d2f62e8e63a738c39f92683; https://github.com/radareorg/radare2/issues/16303; https://github.com/radareorg/radare2/commit/cb8b683758edddae2d2f62e8e63a738c39f92683
CVE: CVE-2020-27795
Published: 2022-08-19
Description: A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensure_fcn_range (fcn).
CVSS Score: 7.5 (HIGH)
CWE: CWE-908, CWE-908
References: https://github.com/radareorg/radare2/commit/4d3811681a80f92a53e795f6a64c4b0fc2c8dd22; https://github.com/radareorg/radare2/issues/16215; https://github.com/radareorg/radare2/pull/16230
CVE: CVE-2020-36256
Published: 2022-08-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2022-2789
Published: 2022-08-19
Description: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-345
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-06