deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-23649
Published: 2022-02-18
Description: Cosign provides container signing, verification, and storage in an OCI registry for the sigstore project. Prior to version 1.5.2, Cosign can be manipulated to claim that an entry for a signature exists in the Rekor transparency log even if it doesn't. This requires the attacker to have pull and push permissions for the signature in OCI. This can happen with both standard signing with a keypair and "keyless signing" with Fulcio. If an attacker has access to the signature in OCI, they can manipulate cosign into believing the entry was stored in Rekor even though it wasn't. The vulnerability has been patched in v1.5.2 of Cosign. The `signature` in the `signedEntryTimestamp` provided by Rekor is now compared to the `signature` that is being verified. If these don't match, then an error is returned. If a valid bundle is copied to a different signature, verification should fail. Cosign output now only informs the user that certificates were verified if a certificate was in fact verified. There is currently no known workaround.
CVSS Score: 3.3 (LOW)
CWE: CWE-295
References: https://github.com/sigstore/cosign/commit/96d410a6580e4e81d24d112a0855c70ca3fb5b49; https://github.com/sigstore/cosign/security/advisories/GHSA-ccxc-vr6p-4858; https://github.com/sigstore/cosign/commit/96d410a6580e4e81d24d112a0855c70ca3fb5b49
CVE: CVE-2022-23650
Published: 2022-02-18
Description: Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.4, and 010.0, there is a hard-coded cryptographic key in the code base which can be exploited to run admin commands on a remote server if the exploiter know the address and username of the admin. This effects the server (netmaker) component, and not clients. This has been patched in Netmaker v0.8.5, v0.9.4, and v0.10.0. There are currently no known workarounds.
CVSS Score: 7.2 (HIGH)
CWE: CWE-321, CWE-798
References: https://github.com/gravitl/netmaker/commit/3d4f44ecfe8be4ca38920556ba3b90502ffb4fee; https://github.com/gravitl/netmaker/commit/e9bce264719f88c30e252ecc754d08f422f4c080; https://github.com/gravitl/netmaker/pull/781/commits/1bec97c662670dfdab804343fc42ae4b1d050a87
CVE: CVE-2022-25358
Published: 2022-02-18
Description: A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar before 0.0.4. Attackers can only list directories (not read files). This occurs because the safe-path? Scheme predicate is not used for directories.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/mario-goulart/awful-salmonella-tar/commit/f705c881769b7610745cd4b4d8ae8b41b3f4f845; https://wiki.call-cc.org/eggref/5/awful-salmonella-tar; https://github.com/mario-goulart/awful-salmonella-tar/commit/f705c881769b7610745cd4b4d8ae8b41b3f4f845
CVE: CVE-2017-0371
Published: 2022-02-18
Description: MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attr(title url);" attack within a DIV element that has an attacker-controlled URL in the title attribute.
CVSS Score: 7.5 (HIGH)
References: https://phabricator.wikimedia.org/T140591; https://phabricator.wikimedia.org/T68404; https://phabricator.wikimedia.org/T140591
CVE: CVE-2022-23642
Published: 2022-02-18
Description: Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` service. The service acts as a git exec proxy, and fails to properly restrict calling `git config`. This allows an attacker to set the git `core.sshCommand` option, which sets git to use the specified command instead of ssh when they need to connect to a remote system. Exploitation of this vulnerability depends on how Sourcegraph is deployed. An attacker able to make HTTP requests to internal services like gitserver is able to exploit it. This issue is patched in Sourcegraph version 3.37. As a workaround, ensure that requests to gitserver are properly protected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-862
References: http://packetstormsecurity.com/files/167506/Sourcegraph-Gitserver-3.36.3-Remote-Code-Execution.html; http://packetstormsecurity.com/files/167741/Sourcegraph-gitserver-sshCommand-Remote-Command-Execution.html; https://github.com/sourcegraph/sourcegraph/pull/30833
CVE: CVE-2021-44302
Published: 2022-02-19
Description: BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/relightsec/BaiCloud/blob/main/README.md; https://github.com/relightsec/BaiCloud/blob/main/README.md
CVE: CVE-2021-45082
Published: 2022-02-19
Description: An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://bugzilla.suse.com/show_bug.cgi?id=1193678; https://github.com/cobbler/cobbler/releases; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEJN7CPW6YCHBFQPFZKGA6AVA6T5NPIW/
CVE: CVE-2022-25130
Published: 2022-02-19
Description: A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_18/18.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/220087; https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_18/18.md
CVE: CVE-2022-25131
Published: 2022-02-19
Description: A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_14/14.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/220086; https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_14/14.md
CVE: CVE-2022-25132
Published: 2022-02-19
Description: A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_16/16.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2022-25132; https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_16/16.md
CVE: CVE-2022-25133
Published: 2022-02-19
Description: A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_20/20.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/220084; https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_20/20.md
CVE: CVE-2022-25134
Published: 2022-02-19
Description: A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_13/13.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/220083; https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_13/13.md
CVE: CVE-2022-25135
Published: 2022-02-19
Description: A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_19/19.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2022-25135; https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_19/19.md
CVE: CVE-2022-25136
Published: 2022-02-19
Description: A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_17/17.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2022-25136; https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_17/17.md
CVE: CVE-2022-25137
Published: 2022-02-19
Description: A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_15/15.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/220077; https://github.com/pjqwudi1/my_vuln/blob/main/totolink/vuln_15/15.md
CVE: CVE-2022-25256
Published: 2022-02-19
Description: SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfs_request_backlabel_list and saspfs_request_backurl_list. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing the button, e.g., a malicious web page. In addition, the second parameter executes JavaScript, which means XSS is possible by adding a javascript: URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/RobertDra/CVE-2022-25256; https://sas.com; https://support.sas.com/kb/62/972.html
CVE: CVE-2022-25365
Published: 2022-02-19
Description: Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774.
CVSS Score: 7.8 (HIGH)
References: https://docs.docker.com/desktop/windows/release-notes/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://docs.docker.com/desktop/windows/release-notes/
CVE: CVE-2022-25366
Published: 2022-02-19
Description: Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious .dylib file that can be executed via the DYLD_INSERT_LIBRARIES environment variable.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://cryptomator.org/; https://medium.com/%40tehwinsam/cryptomator-1-6-5-dylib-injection-8004a1e90b26; https://cryptomator.org/
CVE: CVE-2022-24979
Published: 2022-02-19
Description: An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes (ESI) content element renderer component does not include an access check. This allows an unauthenticated user to render various content elements, resulting in insecure direct object reference (IDOR), with the potential of exposing internal content elements.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://typo3.org/help/security-advisories; https://typo3.org/security/advisory/typo3-ext-sa-2022-003; https://typo3.org/help/security-advisories
CVE: CVE-2022-24980
Published: 2022-02-19
Description: An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to this component. This results in SSRF, allowing attackers to view the content of any file or webpage the webserver has access to.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://typo3.org/help/security-advisories; https://typo3.org/security/advisory/typo3-ext-sa-2022-001; https://typo3.org/help/security-advisories
CVE: CVE-2016-20013
Published: 2022-02-19
Description: sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://akkadia.org/drepper/SHA-crypt.txt; https://pthree.org/2018/05/23/do-not-use-sha256crypt-sha512crypt-theyre-dangerous/; https://twitter.com/solardiz/status/[PII_REDACTED]51457793
CVE: CVE-2022-0409
Published: 2022-02-19
Description: Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://github.com/star7th/showdoc/commit/7383d7a3c1b0807b6f397ba7df415a0ce7ccc436; https://huntr.dev/bounties/c25bfad1-2611-4226-954f-009e50f966f7; https://github.com/star7th/showdoc/commit/7383d7a3c1b0807b6f397ba7df415a0ce7ccc436
CVE: CVE-2022-0678
Published: 2022-02-19
Description: Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/2b8fa5aac31e51e2aca83c7ef5d1281ba2e755f8; https://huntr.dev/bounties/d707137a-aace-44c5-b15c[PII_REDACTED]c0; https://github.com/microweber/microweber/commit/2b8fa5aac31e51e2aca83c7ef5d1281ba2e755f8
CVE: CVE-2022-0630
Published: 2022-02-19
Description: Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad; https://huntr.dev/bounties/f7cdd680-1a7f-4992-b4b8-44b5e4ba3e32; https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad
CVE: CVE-2022-0632
Published: 2022-02-19
Description: NULL Pointer Dereference in Homebrew mruby prior to 3.2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/mruby/mruby/commit/44f591aa8f7091e6ca6cb418e428ae6d4ceaf77d; https://huntr.dev/bounties/3e5bb8f6-30fd-4553-86dd-761e9459ce1b; https://github.com/mruby/mruby/commit/44f591aa8f7091e6ca6cb418e428ae6d4ceaf77d
CVE: CVE-2022-0689
Published: 2022-02-19
Description: Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-840
References: https://github.com/microweber/microweber/commit/c3c25ae6c421bb4a65df9e0035edcc2f75594a04; https://huntr.dev/bounties/fa5dbbd3-97fe-41a9-8797-2e54d9a9c649; https://github.com/microweber/microweber/commit/c3c25ae6c421bb4a65df9e0035edcc2f75594a04
CVE: CVE-2022-23375
Published: 2022-02-19
Description: WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://demo.wikidocs.it/; https://github.com/Zavy86/WikiDocs; https://github.com/Zavy86/WikiDocs/issues/28
CVE: CVE-2022-23376
Published: 2022-02-19
Description: WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://demo.wikidocs.it/; https://github.com/Zavy86/WikiDocs; https://github.com/Zavy86/WikiDocs/issues/28
CVE: CVE-2016-1239
Published: 2022-02-19
Description: duck before 0.10 did not properly handle loading of untrusted code from the current directory.
CVSS Score: 9.8 (CRITICAL)
References: https://salsa.debian.org/debian/duck/-/commit/b43b5bbf07973c54b8f1c581a941f4facc97177a; https://salsa.debian.org/debian/duck/-/commit/b43b5bbf07973c54b8f1c581a941f4facc97177a
CVE: CVE-2022-0690
Published: 2022-02-19
Description: Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/f7f5d41ba1a08ceed37c00d5f70a3f48b272e9f2; https://huntr.dev/bounties/4999a0f4-6efb-4681-b4ba-b36babc366f9; https://github.com/microweber/microweber/commit/f7f5d41ba1a08ceed37c00d5f70a3f48b272e9f2
CVE: CVE-2021-46700
Published: 2022-02-19
Description: In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415
References: https://github.com/saitoha/libsixel/issues/158; https://github.com/saitoha/libsixel/issues/158
CVE: CVE-2022-0685
Published: 2022-02-20
Description: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.
CVSS Score: 7.8 (HIGH)
CWE: CWE-823
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/5921aeb5741fc6e84c870d68c7c35b93ad0c9f87
CVE: CVE-2021-45007
Published: 2022-02-20
Description: Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin panel. NOTE: the vendor states that this is only a site-specific problem on websites of one or more Plesk users
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/AS4mir/CVE-2021-45007/blob/main/README.md; https://github.com/AS4mir/CVE-2021-45007/blob/main/README.md
CVE: CVE-2022-0686
Published: 2022-02-20
Description: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639, CWE-639
References: https://github.com/unshiftio/url-parse/commit/d5c64791ef496ca5459ae7f2176a31ea53b127e5; https://huntr.dev/bounties/55fd06cd-9054-4d80-83be-eb5a454be78c; https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
CVE: CVE-2022-0688
Published: 2022-02-20
Description: Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-840
References: https://github.com/microweber/microweber/commit/a41f0fddaf08ff12b2b82506b1ca9490c93ab605; https://huntr.dev/bounties/051ec6d4-0b0a-41bf-9ded-27813037c9c9; https://github.com/microweber/microweber/commit/a41f0fddaf08ff12b2b82506b1ca9490c93ab605
CVE: CVE-2021-45081
Published: 2022-02-20
Description: An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: http://www.openwall.com/lists/oss-security/2022/02/18/3; https://bugzilla.suse.com/show_bug.cgi?id=1193683; https://github.com/cobbler/cobbler/releases
CVE: CVE-2021-45083
Published: 2022-02-20
Description: An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some sensitive information that can be exposed to a local user who has non-privileged access to the server. The users.digest file contains the sha2-512 digest of users in a Cobbler local installation. In the case of an easy-to-guess password, it's trivial to obtain the plaintext string. The settings.yaml file contains secrets such as the hashed default password.
CVSS Score: 7.1 (HIGH)
CWE: CWE-276
References: https://bugzilla.suse.com/show_bug.cgi?id=1193671; https://github.com/cobbler/cobbler/releases; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEJN7CPW6YCHBFQPFZKGA6AVA6T5NPIW/
CVE: CVE-2022-22126
Published: 2022-02-20
Description: Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nasa/openmct/commit/abc93d0ec4b104dac1ea5f8a615d06e3ab78934a; https://github.com/nasa/openmct/commit/abc93d0ec4b104dac1ea5f8a615d06e3ab78934a
CVE: CVE-2022-23053
Published: 2022-02-20
Description: Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nasa/openmct/commit/abc93d0ec4b104dac1ea5f8a615d06e3ab78934a; https://github.com/nasa/openmct/commit/abc93d0ec4b104dac1ea5f8a615d06e3ab78934a
CVE: CVE-2022-23054
Published: 2022-02-20
Description: Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nasa/openmct/commit/abc93d0ec4b104dac1ea5f8a615d06e3ab78934a; https://github.com/nasa/openmct/commit/abc93d0ec4b104dac1ea5f8a615d06e3ab78934a
CVE: CVE-2022-23848
Published: 2022-02-20
Description: In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://www.alluxio.io/download/releases/alluxio-2-7-3-release/; https://www.alluxio.io/download/releases/alluxio-2-7-3-release/
CVE: CVE-2022-25372
Published: 2022-02-20
Description: Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windows.go.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://github.com/pritunl/pritunl-client-electron/blob/caa78d626198b6961f3f39eca2acd39064c2df96/CHANGES#L6; https://github.com/pritunl/pritunl-client-electron/commit/e16d47437f8ef62546aa00edb0d64be2a7d2205b; https://rhinosecuritylabs.com/penetration-testing/cve-2022-25372-local-privilege-escalation-in-pritunl-vpn-client/
CVE: CVE-2022-25375
Published: 2022-02-20
Description: An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1284
References: http://www.openwall.com/lists/oss-security/2022/02/21/1; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10; https://github.com/szymonh/rndis-co
CVE: CVE-2021-46701
Published: 2022-02-20
Description: PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord.
CVSS Score: 7.2 (HIGH)
CWE: CWE-346
References: https://github.com/PreMiD/PreMiD/issues/790; https://github.com/PreMiD/PreMiD/pull/791; https://github.com/PreMiD/PreMiD/issues/790
CVE: CVE-2022-25297
Published: 2022-02-21
Description: This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files to arbitrary locations outside the designated target folder.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://github.com/drogonframework/drogon/commit/3c785326c63a34aa1799a639ae185bc9453cb447; https://github.com/drogonframework/drogon/pull/1174; https://snyk.io/vuln/SNYK-UNMANAGED-DROGONFRAMEWORKDROGON-2407243
CVE: CVE-2022-0691
Published: 2022-02-21
Description: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639, CWE-639
References: https://github.com/unshiftio/url-parse/commit/0e3fb542d60ddbf6933f22eb9b1e06e25eaa5b63; https://huntr.dev/bounties/57124ed5-4b68-4934-8325-2c546257f2e4; https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html