deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-47938
Published: 2022-12-23
Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://www.openwall.com/lists/oss-security/2022/12/23/10; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=824d4f64c20093275f72fc8101394d75ff6a249e
CVE: CVE-2022-47939
Published: 2022-12-23
Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: http://www.openwall.com/lists/oss-security/2022/12/23/10; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf6531d98190fa2cf92a6d8bbc8af0a4740a223c
CVE: CVE-2022-47940
Published: 2022-12-23
Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125
References: http://www.openwall.com/lists/oss-security/2022/12/23/10; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.18; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=158a66b245739e15858de42c0ba60fcf3de9b8e6
CVE: CVE-2022-47941
Published: 2022-12-23
Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree call in certain smb2_handle_negotiate error conditions, aka a memory leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: http://www.openwall.com/lists/oss-security/2022/12/23/10; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=aa7253c2393f6dcd6a1468b0792f6da76edad917
CVE: CVE-2022-47942
Published: 2022-12-23
Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2022/12/23/10; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f0541186e9ad1b62accc9519cc2b7a7240272a7
CVE: CVE-2022-4697
Published: 2022-12-23
Description: The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_user_cover_default_image_url’ parameter in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2838522%40wp-user-avatar%2Ftrunk&old=2837217%40wp-user-avatar%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/3d54f585-0116-4517-84f1-271e89a05539?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2838522%40wp-user-avatar%2Ftrunk&old=2837217%40wp-user-avatar%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2022-4698
Published: 2022-12-23
Description: The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2838522%40wp-user-avatar%2Ftrunk&old=2837217%40wp-user-avatar%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/43c9dcec-f769-4c55-93d0-c2aa45a4fa16?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2838522%40wp-user-avatar%2Ftrunk&old=2837217%40wp-user-avatar%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2022-47943
Published: 2022-12-23
Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125
References: http://www.openwall.com/lists/oss-security/2022/12/23/10; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac60778b87e45576d7bfdbd6f53df902654e6f09
CVE: CVE-2022-39165
Published: 2022-12-23
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service.  IBM X-Force ID:  235183.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/235183; https://www.ibm.com/support/pages/node/6847947; https://exchange.xforce.ibmcloud.com/vulnerabilities/235183
CVE: CVE-2022-40233
Published: 2022-12-23
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service.  IBM X-Force ID:  235599.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/235599; https://www.ibm.com/support/pages/node/6847947; https://exchange.xforce.ibmcloud.com/vulnerabilities/235599
CVE: CVE-2022-43380
Published: 2022-12-23
Description: 
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640.


CVSS Score: 6.2 (MEDIUM)
CWE: CWE-399
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/238640; https://www.ibm.com/support/pages/node/6847947; https://exchange.xforce.ibmcloud.com/vulnerabilities/238640
CVE: CVE-2022-43381
Published: 2022-12-23
Description: 
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 238639.


CVSS Score: 6.2 (MEDIUM)
CWE: CWE-399
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/238639; https://www.ibm.com/support/pages/node/6851443; https://exchange.xforce.ibmcloud.com/vulnerabilities/238639
CVE: CVE-2022-45706
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SJZx0L0Sj; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SJZx0L0Sj; https://hackmd.io/@chaosisaladdar/SJZx0L0Sj
CVE: CVE-2022-45707
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HyEfIEpBj; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HyEfIEpBj; https://hackmd.io/@chaosisaladdar/HyEfIEpBj
CVE: CVE-2022-45708
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1rR3UArj; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1rR3UArj; https://hackmd.io/@chaosisaladdar/B1rR3UArj
CVE: CVE-2022-45709
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BkFpXcsSs; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BkFpXcsSs; https://hackmd.io/@chaosisaladdar/BkFpXcsSs
CVE: CVE-2022-45710
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1XG-5iSo; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/B1XG-5iSo; https://hackmd.io/@chaosisaladdar/B1XG-5iSo
CVE: CVE-2022-45711
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://hackmd.io/dLM8vDnwQOup8mmDbHJRHQ?both; https://hackmd.io/dLM8vDnwQOup8mmDbHJRHQ?both; https://hackmd.io/dLM8vDnwQOup8mmDbHJRHQ?both
CVE: CVE-2022-45712
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/r1pG4cori; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/r1pG4cori; https://hackmd.io/@chaosisaladdar/r1pG4cori
CVE: CVE-2022-45714
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/S1QhLw0Ss; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/S1QhLw0Ss; https://hackmd.io/@chaosisaladdar/S1QhLw0Ss
CVE: CVE-2022-45715
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HkJ_o8Arj; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/HkJ_o8Arj; https://hackmd.io/@chaosisaladdar/HkJ_o8Arj
CVE: CVE-2022-45716
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/rywHivCBo; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/rywHivCBo; https://hackmd.io/@chaosisaladdar/rywHivCBo
CVE: CVE-2022-45717
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/By3Y6DRrj; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/By3Y6DRrj; https://hackmd.io/@chaosisaladdar/By3Y6DRrj
CVE: CVE-2022-45718
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/Hkb38vELj; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/Hkb38vELj; https://hackmd.io/@chaosisaladdar/Hkb38vELj
CVE: CVE-2022-45719
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJ8I_DCBi; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJ8I_DCBi; https://hackmd.io/@chaosisaladdar/BJ8I_DCBi
CVE: CVE-2022-45720
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SkCD5PEUo; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/SkCD5PEUo; https://hackmd.io/@chaosisaladdar/SkCD5PEUo
CVE: CVE-2022-45721
Published: 2022-12-23
Description: IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJUfyuABo; https://hackmd.io/%40AAN506JzR6urM5U8fNh1ng/BJUfyuABo; https://hackmd.io/@chaosisaladdar/BJUfyuABo
CVE: CVE-2022-46560
Published: 2022-12-23
Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/SetWan2Settings_l2tp; https://hackmd.io/%400dayResearch/SetWan2Settings_pppoe; https://hackmd.io/%400dayResearch/SetWan2Settings_pptp
CVE: CVE-2022-46561
Published: 2022-12-23
Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/SetWanSettings_L2TP; https://hackmd.io/%400dayResearch/SetWanSettings_PPPoE; https://hackmd.io/%400dayResearch/SetWanSettings_PPTP
CVE: CVE-2022-46562
Published: 2022-12-23
Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/B1C9jeXDi; https://hackmd.io/%400dayResearch/SetQuickVPNSettings_PSK; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2022-46563
Published: 2022-12-23
Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://hackmd.io/%400dayResearch/HkDzZLCUo; https://hackmd.io/%400dayResearch/SetDynamicDNSSettings; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2022-46566
Published: 2022-12-23
Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/SetQuickVPNSettings_Password; https://hackmd.io/%400dayResearch/SyhDme7wo; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2022-46568
Published: 2022-12-23
Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/B1SZP0aIo; https://hackmd.io/%400dayResearch/SetSysEmailSettings; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2022-46569
Published: 2022-12-23
Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/SetWLanRadioSecurity; https://hackmd.io/%400dayResearch/r1R6sWRUs; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2022-46570
Published: 2022-12-23
Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan3Settings module.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/SetWan3Settings_l2tp; https://hackmd.io/%400dayResearch/SetWan3Settings_pppoe; https://hackmd.io/%400dayResearch/SetWan3Settings_pptp
CVE: CVE-2022-39164
Published: 2022-12-23
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service.  IBM X-Force ID:  235181.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/235181; https://www.ibm.com/support/pages/node/6847947; https://exchange.xforce.ibmcloud.com/vulnerabilities/235181
CVE: CVE-2022-41290
Published: 2022-12-23
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rm_rlcache_file command to obtain root privileges.  IBM X-Force ID:  236690.
CVSS Score: 8.4 (HIGH)
CWE: CWE-250, CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/236690; https://www.ibm.com/support/pages/node/6847917; https://exchange.xforce.ibmcloud.com/vulnerabilities/236690
CVE: CVE-2022-43848
Published: 2022-12-23
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service.  IBM X-Force ID:  239169.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/239169; https://www.ibm.com/support/pages/node/6847947; https://exchange.xforce.ibmcloud.com/vulnerabilities/239169
CVE: CVE-2022-43849
Published: 2022-12-23
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service.  IBM X-Force ID:  239170.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/239170; https://www.ibm.com/support/pages/node/6847947; https://exchange.xforce.ibmcloud.com/vulnerabilities/239170
CVE: CVE-2022-4692
Published: 2022-12-23
Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/usememos/memos/commit/c07b4a57caa89905e54b800f4d8fb720bbf5bf82; https://huntr.dev/bounties/9d1ed6ea-f7a0-4561-9325-a2babef99c74; https://github.com/usememos/memos/commit/c07b4a57caa89905e54b800f4d8fb720bbf5bf82
CVE: CVE-2022-23854
Published: 2022-12-23
Description: AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://crisec.de/advisory-aveva-intouch-access-anywhere-secure-gateway-path-traversal; https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2023-001_r.pdf; https://www.cisa.gov/uscert/ics/advisories/icsa-22-342-02
CVE: CVE-2022-47945
Published: 2022-12-23
Description: ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://github.com/top-think/framework/commit/c4acb8b4001b98a0078eda25840d33e295a7f099; https://github.com/top-think/framework/compare/v6.0.13...v6.0.14; https://tttang.com/archive/1865/
CVE: CVE-2022-28228
Published: 2022-12-23
Description: Out-of-bounds read was discovered in YDB server. An attacker could construct a query with insert statement that would allow him to read sensitive information from other memory locations or cause a crash.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://ydb.tech/ru/docs/security-changelog#28-11-2022; https://ydb.tech/ru/docs/security-changelog#28-11-2022
CVE: CVE-2022-28229
Published: 2022-12-23
Description: The hash functionality in userver before 42059b[PII_REDACTED]b3080cab9b595d4f8ac48128 allows attackers to cause a denial of service via crafted HTTP request, involving collisions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://userver.tech/df/d3a/md_en_userver_security_changelog.html; https://userver.tech/df/d3a/md_en_userver_security_changelog.html
CVE: CVE-2022-47946
Published: 2022-12-23
Description: An issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kernel, resulting in denial of service. finish_wait can be skipped. An attack can occur in some situations by forking a process and then quickly terminating it. NOTE: later kernel versions, such as the 5.15 longterm series, substantially changed the implementation of io_sqpoll_wait_sq.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://www.openwall.com/lists/oss-security/2022/12/27/1; https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.161&id=0f544353fec8e717d37724d95b92538e1de79e86; https://www.openwall.com/lists/oss-security/2022/12/22/2
CVE: CVE-2022-40011
Published: 2022-12-23
Description: Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then used at a victim's origin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gist.github.com/wangking1/61bdd[PII_REDACTED]a950ffbb3d10386f3; https://typora.io/releases/all; http://typora.com
CVE: CVE-2022-47633
Published: 2022-12-23
Description: An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/kyverno/kyverno/compare/v1.8.4...v1.8.5; https://github.com/kyverno/kyverno/pull/5713; https://github.com/kyverno/kyverno/releases/tag/v1.8.5
CVE: CVE-2022-22449
Published: 2022-12-24
Description: IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.  IBM X-Force ID:  224915.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/224915; https://www.ibm.com/support/pages/node/6849247; https://exchange.xforce.ibmcloud.com/vulnerabilities/224915
CVE: CVE-2022-38658
Published: 2022-12-24
Description: BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed.

CVSS Score: 7.7 (HIGH)
CWE: CWE-311, CWE-311
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102117; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102117