deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-0215
Published: 2022-01-18
Description: The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the save_settings function found in the ~/includes/xoo-framework/admin/class-xoo-admin-settings.php file which makes it possible for attackers to update arbitrary options on a site that can be used to create an administrative user account and grant full privileged access to a compromised site. This affects versions <= 2.2 in Login/Signup Popup, versions <= 2.5.1 in Waitlist Woocommerce ( Back in stock notifier ), and versions <= 2.0 in Side Cart Woocommerce (Ajax).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/easy-login-woocommerce/tags/2.2/includes/xoo-framework/admin/class-xoo-admin-settings.php#L122; https://plugins.trac.wordpress.org/browser/side-cart-woocommerce/tags/2.1/includes/xoo-framework/admin/class-xoo-admin-settings.php?rev=2538194#L128; https://plugins.trac.wordpress.org/browser/waitlist-woocommerce/tags/2.5.1/includes/xoo-framework/admin/class-xoo-admin-settings.php#L122
CVE: CVE-2022-0232
Published: 2022-01-18
Description: The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loader_text parameter found in the ~/includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.2.7. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/BigTiger2020/2022/blob/main/User%20Registration%20Xss.md; https://plugins.trac.wordpress.org/browser/custom-landing-pages-leadmagic/tags/1.2.6/includes/templates/landing-page.php#L35; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0232
CVE: CVE-2022-0233
Published: 2022-01-18
Description: The ProfileGrid – User Profiles, Memberships, Groups and Communities WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the pm_user_avatar and pm_cover_image parameters found in the ~/admin/class-profile-magic-admin.php file which allows attackers with authenticated user access, such as subscribers, to inject arbitrary web scripts into their profile, in versions up to and including 1.2.7.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/BigTiger2020/2022/blob/main/ProfileGrid%20Xss.md; https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/4.7.4/admin/class-profile-magic-admin.php#L961; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0233
CVE: CVE-2022-0236
Published: 2022-01-18
Description: The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_process_file_download found in the ~/includes/classes/class-wpie-general.php file. This made it possible for unauthenticated attackers to download any imported or exported information from a vulnerable site which can contain sensitive information like user data. This affects versions up to, and including, 3.9.15.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/qurbat/CVE-2022-0236; https://plugins.trac.wordpress.org/changeset/2649762/wp-import-export-lite/trunk/includes/classes/class-wpie-general.php; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0236
CVE: CVE-2022-0244
Published: 2022-01-18
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to incorrect handling of file.
CVSS Score: 8.6 (HIGH)
CWE: CWE-552
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0244.json; https://gitlab.com/gitlab-org/gitlab/-/issues/349524; https://hackerone.com/reports/1439593
CVE: CVE-2022-22690
Published: 2022-01-18
Description: Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" (or just "ApplicationUrl") is used whenever application code needs to build a URL pointing back to the site. For example, when a user resets their password and the application builds a password reset URL or when the administrator invites users to the site. For Umbraco versions less than 9.2.0, if the Application URL is not specifically configured, the attacker can manipulate this value and store it persistently affecting all users for components where the "UmbracoApplicationUrl" is used. For example, the attacker is able to change the URL users receive when resetting their password so that it points to the attackers server, when the user follows this link the reset token can be intercepted by the attacker resulting in account takeover.
CVSS Score: 8.6 (HIGH)
CWE: CWE-444
References: https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691/; https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691/
CVE: CVE-2022-22691
Published: 2022-01-18
Description: The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset token if/when the link is followed. A related vulnerability (CVE-2022-22690) could allow this flaw to become persistent so that all password reset URLs are affected persistently following a successful attack. See the AppCheck advisory for further information and associated caveats.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-640, CWE-444
References: https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691/; https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691/
CVE: CVE-2022-23083
Published: 2022-01-18
Description: NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due to insufficient input validation that could potentially allow an attacker to execute code on the affected machine.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.broadcom.com/external/content/security-advisories/NetMaster-12.2-ReportCenter-Vulnerability-CVE-2022-23083/20049; https://support.broadcom.com/external/content/security-advisories/NetMaster-12.2-ReportCenter-Vulnerability-CVE-2022-23083/20049
CVE: CVE-2021-34401
Published: 2022-01-18
Description: NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control may lead to code execution, compromised integrity, or denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5259
CVE: CVE-2021-34402
Published: 2022-01-18
Description: NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or possible escalation of privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284, CWE-125, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5259
CVE: CVE-2021-34403
Published: 2022-01-18
Description: NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, leading to code privilege escalation, loss of confidentiality and integrity, or denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5259
CVE: CVE-2021-34404
Published: 2022-01-18
Description: Android images for T210 provided by NVIDIA contain a vulnerability in BROM, where failure to limit access to AHB-DMA when BROM fails may allow an unprivileged attacker with physical access to cause denial of service or impact integrity and confidentiality beyond the security scope of BROM.
CVSS Score: 7.1 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5259
CVE: CVE-2021-34405
Published: 2022-01-18
Description: NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer dereference may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5259
CVE: CVE-2021-34406
Published: 2022-01-18
Description: NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a system reboot.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476, CWE-362, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5259
CVE: CVE-2021-46005
Published: 2022-01-18
Description: Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49546; https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html; https://www.exploit-db.com/exploits/49546
CVE: CVE-2021-46012
Published: 2022-01-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA
CVE: CVE-2021-46013
Published: 2022-01-18
Description: An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing "<?php system($_GET["cmd"]); ?>" gets uploaded it is saved into /uploads/exam_question/ directory, and is accessible by all users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/50587; https://www.exploit-db.com/exploits/50587
CVE: CVE-2022-21683
Published: 2022-01-18
Description: Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in the relevant threads. This means that a user could listen in to new comment replies on pages they have not have editing access to, as long as they have left a comment or reply somewhere on the site. A patched version has been released as Wagtail 2.15.2, which restores the intended behaviour - to send notifications for new replies to the participants in the active thread only (editing permissions are not considered). New comments can be disabled by setting `WAGTAILADMIN_COMMENTS_ENABLED = False` in the Django settings file.
CVSS Score: 3.5 (LOW)
CWE: CWE-200, CWE-200
References: https://github.com/wagtail/wagtail/commit/5fe901e5d86ed02dbbb63039a[PII_REDACTED]66afd; https://github.com/wagtail/wagtail/releases/tag/v2.15.2; https://github.com/wagtail/wagtail/security/advisories/GHSA-xqxm-2rpm-3889
CVE: CVE-2021-44840
Published: 2022-01-18
Description: An issue was discovered in Delta RM 1.2. Using an privileged account, it is possible to edit, create, and delete risk labels, such as Criticality and Priority Indication labels. By using the /core/table/query endpoint, and by using a POST request and indicating the affected label with tableUid parameter and the operation with datas[query], it is possible to edit, create, and delete the following labels: Priority Indication, Quality Evaluation, Progress Margin and Priority. Furthermore, it is also possible to export Criticality labels with an unprivileged user.
CVSS Score: 2.7 (LOW)
CWE: CWE-862
References: https://gist.github.com/rntcruz23/81f83f9e406198b08ab40ffae8336a92; https://www.deltarm.com; https://gist.github.com/rntcruz23/81f83f9e406198b08ab40ffae8336a92
CVE: CVE-2021-44836
Published: 2022-01-18
Description: An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://gist.github.com/rntcruz23/01af412813c63d6e0cc41c26f52893be; https://www.deltarm.com; https://gist.github.com/rntcruz23/01af412813c63d6e0cc41c26f52893be
CVE: CVE-2021-44838
Published: 2022-01-18
Description: An issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a POST request indicating the risk to access with the id parameter, it is possible for users to access risks of other companies.
CVSS Score: 4.3 (MEDIUM)
References: https://gist.github.com/rntcruz23/6575c0ef45c30687c538361910bb8ab3; https://www.deltarm.com; https://gist.github.com/rntcruz23/6575c0ef45c30687c538361910bb8ab3
CVE: CVE-2021-44839
Published: 2022-01-18
Description: An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/adm_utilisateur/send-mail.json endpoint, a user can send a JSON array with user IDs that will have their passwords reset (and new ones sent to their respective e-mail addresses).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-640
References: https://gist.github.com/rntcruz23/16ac2d9dfc7e32b0f57dc7b20f17cd29; https://www.deltarm.com; https://gist.github.com/rntcruz23/16ac2d9dfc7e32b0f57dc7b20f17cd29
CVE: CVE-2022-21696
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the username to that of another chat participant with an additional space character at the end of the name string. An adversary with access to the chat environment can use the rename feature to impersonate other participants by adding whitespace characters at the end of the username.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-68vr-8f46-vc9f; https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE: CVE-2022-23408
Published: 2022-01-18
Description: wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-330
References: https://github.com/wolfSSL/wolfssl/blob/master/ChangeLog.md#wolfssl-release-511-jan-3rd-2022; https://github.com/wolfSSL/wolfssl/pull/4710; https://github.com/wolfSSL/wolfssl/blob/master/ChangeLog.md#wolfssl-release-511-jan-3rd-2022
CVE: CVE-2022-21673
Published: 2022-01-18
Description: Grafana is an open-source platform for monitoring and observability. In affected versions when a data source has the Forward OAuth Identity feature enabled, sending a query to that datasource with an API token (and no other user credentials) will forward the OAuth Identity of the most recently logged-in user. This can allow API token holders to retrieve data for which they may not have intended access. This attack relies on the Grafana instance having data sources that support the Forward OAuth Identity feature, the Grafana instance having a data source with the Forward OAuth Identity feature toggled on, the Grafana instance having OAuth enabled, and the Grafana instance having usable API keys. This issue has been patched in versions 7.5.13 and 8.3.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/grafana/grafana/releases/tag/v7.5.13; https://github.com/grafana/grafana/releases/tag/v8.3.4; https://github.com/grafana/grafana/security/advisories/GHSA-8wjh-59cw-9xh4
CVE: CVE-2022-21688
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected versions of the desktop application were found to be vulnerable to denial of service via an undisclosed vulnerability in the QT image parsing. Roughly 20 bytes lead to 2GB memory consumption and this can be triggered multiple times. To be abused, this vulnerability requires rendering in the history tab, so some user interaction is required. An adversary with knowledge of the Onion service address in public mode or with authentication in private mode can perform a Denial of Service attack, which quickly results in out-of-memory for the server. This requires the desktop application with rendered history, therefore the impact is only elevated. This issue has been patched in version 2.5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-x7wr-283h-5h2v; https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE: CVE-2022-21689
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions the receive mode limits concurrent uploads to 100 per second and blocks other uploads in the same second, which can be triggered by a simple script. An adversary with access to the receive mode can block file upload for others. There is no way to block this attack in public mode due to the anonymity properties of the tor network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-jh82-c5jw-pxpc; https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE: CVE-2022-21691
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions chat participants can spoof their channel leave message, tricking others into assuming they left the chatroom.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-w9m4-7w72-r766; https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE: CVE-2022-21693
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions an adversary with a primitive that allows for filesystem access from the context of the Onionshare process can access sensitive files in the entire user home folder. This could lead to the leaking of sensitive data. Due to the automatic exclusion of hidden folders, the impact is reduced. This can be mitigated by usage of the flatpak release.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-jgm9-xpfj-4fq6; https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE: CVE-2022-21695
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions authenticated users (or unauthenticated in public mode) can send messages without being visible in the list of chat participants. This issue has been resolved in version 2.5.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-99p8-9p2c-49j4; https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE: CVE-2022-21690
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the requested URL is not sanitized before being passed to the QT frontend. This path is used in all components for displaying the server access history. This leads to a rendered HTML4 Subset (QT RichText editor) in the Onionshare frontend.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-ch22-x2v3-v6vq; https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE: CVE-2022-21692
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised as another chat participant.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-gjj5-998g-v36v; https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE: CVE-2022-21694
Published: 2022-01-18
Description: OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. The website mode of the onionshare allows to use a hardened CSP, which will block any scripts and external resources. It is not possible to configure this CSP for individual pages and therefore the security enhancement cannot be used for websites using javascript or external resources like fonts or images.
CVSS Score: 3.7 (LOW)
CWE: CWE-732, CWE-732
References: https://github.com/onionshare/onionshare/issues/1389; https://github.com/onionshare/onionshare/releases/tag/v2.5; https://github.com/onionshare/onionshare/security/advisories/GHSA-h29c-wcm8-883h