rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-36161 
Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-26T12:57:16.000Z
CVE-2022-36168 
A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app/attachment/admin/index.php:
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T23:40:09.000Z
CVE-2022-36170 
MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T20:30:49.000Z
CVE-2022-36171 
MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T21:13:20.000Z
CVE-2022-36173 
FreshService macOS Agent < 4.4.0 and FreshServce Linux Agent < 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and scheduled update service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T20:56:05.000Z
CVE-2022-36174 
FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T20:55:52.000Z
CVE-2022-36179 
Fusiondirectory 1.3 suffers from Improper Session Handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-22T00:00:00.000Z
CVE-2022-36180 
Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout=1&message=[injection]&plug=106.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-22T00:00:00.000Z
CVE-2022-36182 
Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious actions on the site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-27T00:00:00.000Z
CVE-2022-36186 
A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid.c:5250,which causes a Denial of Service (DoS). This vulnerability was fixed in commit b43f9d1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-17T14:46:40.000Z
CVE-2022-36190 
GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-17T00:00:00.000Z
CVE-2022-36191 
A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-17T00:00:00.000Z
CVE-2022-36193 
SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-28T00:00:00.000Z
CVE-2022-36194 
Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T05:42:05.000Z
CVE-2022-36197 
BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T00:03:41.000Z
CVE-2022-36198 
Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and buspassms/admin/edit-pass-detail.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-22T00:31:13.000Z
CVE-2022-36200 
In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T14:21:40.000Z
CVE-2022-36201 
Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T20:47:11.000Z
CVE-2022-36202 
Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (IDOR) via id= parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T20:43:31.000Z
CVE-2022-36203 
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-31T20:36:08.000Z
CVE-2022-36215 
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-17T19:12:41.000Z
CVE-2022-36216 
DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-17T19:06:03.000Z
CVE-2022-36220 
Kiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T12:42:04.000Z
CVE-2022-36221 
Nokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to read any named pipe file on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-21T00:00:00.000Z
CVE-2022-36222 
Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5st7o This account can be used locally to access the web admin interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-21T00:00:00.000Z
CVE-2022-36223 
In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token and flip or steal the media server administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-16T00:00:00.000Z
CVE-2022-36224 
XunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T16:34:16.000Z
CVE-2022-36225 
EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management function and add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T16:43:49.000Z
CVE-2022-36226 
SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T23:37:21.000Z
CVE-2022-36227 
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-22T00:00:00.000Z
CVE-2022-36228 
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-10-09T00:00:00.000Z
CVE-2022-36231 
pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-23T00:00:00.000Z
CVE-2022-36233 
Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T21:31:12.000Z
CVE-2022-36234 
SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-28T22:50:03.000Z
CVE-2022-36242 
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T16:56:30.000Z
CVE-2022-36243 Directory Traversal on Shop Beat Services
Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2.57 on arm.
Problem types: cwe_id: CWE-548
description: CWE-548 Information Exposure Through Directory Listing
Affected products: vendor: Shop Beat
product: studio
Credits: lang: en
value: Shop Beat thanks Emirates National Oil Company Limited (ENOC) LLC for the above discovery.
Published: 2023-05-30T00:00:00.000Z
CVE-2022-36244 Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Shop Beat
product: studio
Credits: lang: en
value: Shop Beat thanks Emirates National Oil Company Limited (ENOC) LLC for the above discovery.
Published: 2023-05-30T00:00:00.000Z
CVE-2022-36246 Shop Beat Services Vulnerable To Insecure Permissions
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.
Problem types: cwe_id: CWE-264
description: CWE-264 Permissions, Privileges, and Access Controls
Affected products: vendor: Shop Beat
product: studio
Credits: lang: en
value: Shop Beat thanks Emirates National Oil Company Limited (ENOC) LLC for the above discovery.
Published: 2023-05-30T00:00:00.000Z
CVE-2022-36247 Shop Beat Services Vulnerable To IDOR
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.
Problem types: description: By modifying IDOR data on controlpanel.shopbeat.co.za an attacker could manipulate unauthorised assets.
Affected products: vendor: Shop Beat
product: studio
Credits: lang: en
value: Shop Beat thanks Emirates National Oil Company Limited (ENOC) LLC for the above discovery.
Published: 2023-05-30T00:00:00.000Z
CVE-2022-36249 Shop Beat Services Vulnerable To Bypass 2FA via APIs
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API level.
Problem types: cwe_id: CWE-288
description: CWE-288 Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: Shop Beat
product: studio
Credits: lang: en
value: Shop Beat thanks Emirates National Oil Company Limited (ENOC) LLC for the above discovery.
Published: 2023-05-30T00:00:00.000Z
CVE-2022-36250 Cross Site Request Forgery on Shop Beat Services
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CSRF).
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Shop Beat
product: studio
Credits: lang: en
value: Shop Beat thanks Emirates National Oil Company Limited (ENOC) LLC for the above discovery.
Published: 2023-05-30T00:00:00.000Z
CVE-2022-36251 
Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via patients.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-22T00:37:38.000Z
CVE-2022-36254 
Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel Management System 1.0 allow remote attackers to inject arbitrary web script or HTML via multiple parameters such as "fullname".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T03:04:08.000Z
CVE-2022-36255 
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T03:06:49.000Z
CVE-2022-36256 
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "productcode".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T03:08:56.000Z
CVE-2022-36257 
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "users", "pass", etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T03:11:12.000Z
CVE-2022-36258 
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T03:12:59.000Z
CVE-2022-36259 
A SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "username", "password", etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-12T03:14:33.000Z
CVE-2022-36261 
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-23T12:46:47.000Z
CVE-2022-36262 
An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T11:30:59.000Z
CVE-2022-36263 
StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute arbitrary code via a crafted .exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T14:48:11.000Z
CVE-2022-36264 
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnerability which allows overwriting arbitrary files. A malicious actor can remotely upload a file of their choice and overwrite any file in the system by manipulating the filename and append a relative path that will be interpreted during the upload process. Using this method, it is possible to rewrite any file in the system or upload a new file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T14:38:01.000Z
CVE-2022-36265 
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a reverse engineering of the firmware, it was discovered that a hidden page not listed in the administration management interface allows a user to execute Linux commands on the device with root privileges. An authenticated malicious threat actor can use this page to fully compromise the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T14:36:44.000Z
CVE-2022-36266 
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As the binary file /home/www/cgi-bin/login.cgi does not check if the user is authenticated, a malicious actor can craft a specific request on the login.cgi endpoint that contains a base32 encoded XSS payload that will be accepted and stored. A successful attack will results in the injection of malicious scripts into the user settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T14:35:29.000Z
CVE-2022-36267 
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authentication when crafting a malicious http request by injecting code in one of the parameters allowing for remote code execution. This vulnerability is exploited via the binary file /home/www/cgi-bin/diagnostics.cgi that accepts unauthenticated requests and unsanitized data. As a result, a malicious actor can craft a specific request and interact remotely with the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-08T14:34:15.000Z
CVE-2022-36270 
Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-10T16:32:26.000Z
CVE-2022-36271 
Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T13:46:44.000Z
CVE-2022-36272 
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T12:49:14.000Z
CVE-2022-36273 
Tenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T12:43:35.000Z
CVE-2022-36276 SQL injection vulnerability in TCMAN GIM
TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: TCMAN
product: GIM
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 9.9
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
version: 3.1
Credits: lang: en
value: Pablo Arias Rodríguez and Jorge Alberto Palma Reyes
Published: 2023-10-04T15:04:11.438Z
CVE-2022-36277 SQL injection vulnerability in TCMAN GIM
The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: TCMAN
product: GIM
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Pablo Arias Rodríguez and Jorge Alberto Palma Reyes
Published: 2023-10-04T15:05:35.689Z
CVE-2022-36278 
Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) Battery Life Diagnostic Tool software
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 8.2
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2023-02-16T20:00:05.751Z
CVE-2022-36279 
A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
Problem types: cwe_id: CWE-120
description: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Siretta
product: QUARTZ-GOLD
Published: 2023-01-26T21:24:50.817Z
CVE-2022-36280 There is an out-of-bounds write vulnerability in vmwgfx driver
An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: Linux
product: kernel
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: HIGH
baseScore: 6.3
baseSeverity: MEDIUM
Credits: lang: en
value: Ziming Zhang(ezrakiez@gmail.com) from Ant Group Light-Year Security Lab
Published: 2022-09-09T14:39:50.986Z