rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-22946 
In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or custom certificates.
Problem types: description: OWASP Top Ten 2021 Category A05:2021 - Security Misconfiguration
Affected products: vendor: n/a
product: Spring Cloud Gateway
Published: 2022-03-04T15:50:06.000Z
CVE-2022-22947 
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: n/a
product: Spring Cloud Gateway
Published: 2022-03-03T00:00:00.000Z
CVE-2022-22948 
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Problem types: description: Information disclosure vulnerability
Affected products: vendor: n/a
product: VMware vCenter Server and VMware Cloud Foundation
Published: 2022-03-29T17:24:33.000Z
CVE-2022-22950 
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
Problem types: cwe_id: CWE-770
description: CWE-770: Allocation of Resources Without Limits or Throttling
Affected products: vendor: n/a
product: Spring Framework
Published: 2022-04-01T22:17:32.000Z
CVE-2022-22951 
VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS command injection vulnerability. An authenticated, high privileged malicious actor with network access to the VMware App Control administration interface may be able to execute commands on the server due to improper input validation leading to remote code execution.
Problem types: description: OS command injection vulnerability in VMware Carbon Black App Control
Affected products: vendor: n/a
product: VMware Carbon Black App Control (AppC)
Published: 2022-03-23T19:46:46.000Z
CVE-2022-22952 
VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerability. A malicious actor with administrative access to the VMware App Control administration interface may be able to execute code on the Windows instance where AppC Server is installed by uploading a specially crafted file.
Problem types: description: HFile upload vulnerability in VMware Carbon Black App Control
Affected products: vendor: n/a
product: VMware Carbon Black App Control (AppC)
Published: 2022-03-23T19:46:47.000Z
CVE-2022-22953 
VMware HCX update addresses an information disclosure vulnerability. A malicious actor with network user access to the VMware HCX appliance may be able to gain access to sensitive information.
Problem types: description: VMware HCX update addresses an information disclosure vulnerability
Affected products: vendor: n/a
product: VMware HCX
Published: 2022-06-16T15:54:54.000Z
CVE-2022-22954 
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: VMware Workspace ONE Access and Identity Manager
Published: 2022-04-11T19:37:39.000Z
CVE-2022-22955 
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.
Problem types: description: Authentication bypass
Affected products: vendor: n/a
product: VMware Workspace ONE Access
Published: 2022-04-13T17:05:58.000Z
CVE-2022-22956 
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.
Problem types: description: Authentication bypass
Affected products: vendor: n/a
product: VMware Workspace ONE Access
Published: 2022-04-13T00:00:00.000Z
CVE-2022-22957 
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote code execution.
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: VMware Workspace ONE Access, Identity Manager and vRealize Automation.
Published: 2022-04-13T00:00:00.000Z
CVE-2022-22958 
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote code execution.
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: VMware Workspace ONE Access, Identity Manager and vRealize Automation.
Published: 2022-04-13T17:05:58.000Z
CVE-2022-22959 
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to unintentionally validate a malicious JDBC URI.
Problem types: description: Cross site request forgery
Affected products: vendor: n/a
product: VMware Workspace ONE Access, Identity Manager and vRealize Automation
Published: 2022-04-13T17:05:54.000Z
CVE-2022-22960 
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
Problem types: description: Privilege escalation
Affected products: vendor: n/a
product: VMware Workspace ONE Access, Identity Manager and vRealize Automation
Published: 2022-04-13T00:00:00.000Z
CVE-2022-22961 
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exploitation of this issue can lead to targeting victims.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: VMware Workspace ONE Access, Identity Manager and vRealize Automation
Published: 2022-04-13T17:05:56.000Z
CVE-2022-22962 
VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder location due to a vulnerable symbolic link. Successful exploitation can result in linking to a root owned file.
Problem types: description: Local privilege escalation due to vulnerable symbolic link
Affected products: vendor: VMware
product: VMware Horizon Agent for Linux
Published: 2022-04-11T19:38:28.000Z
CVE-2022-22963 
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: n/a
product: Spring Cloud Function
Published: 2022-04-01T00:00:00.000Z
CVE-2022-22964 
VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to root due to a vulnerable configuration file.
Problem types: description: Local privilege escalation due to vulnerable configuration file
Affected products: vendor: VMware
product: VMware Horizon Agent for Linux
Published: 2022-04-11T19:38:29.000Z
CVE-2022-22965 
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Problem types: cwe_id: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: n/a
product: Spring Framework
Published: 2022-04-01T22:17:30.000Z
CVE-2022-22966 
An authenticated, high privileged malicious actor with network access to the VMware Cloud Director tenant or provider may be able to exploit a remote code execution vulnerability to gain access to the server.
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: VMware Cloud Director
Published: 2022-04-14T20:05:49.000Z
CVE-2022-22967 
An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.
Problem types: description: PAM auth fails to reject locked accounts.
Affected products: vendor: n/a
product: SaltStack Salt
Published: 2022-06-22T00:00:00.000Z
CVE-2022-22968 
In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path.
Problem types: description: Data Binding Rules Vulnerability
Affected products: vendor: n/a
product: Spring Framework
Published: 2022-04-14T20:05:50.000Z
CVE-2022-22969 
<Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client application. A malicious user or attacker can send multiple requests initiating the Authorization Request for the Authorization Code Grant, which has the potential of exhausting system resources using a single session. This vulnerability exposes OAuth 2.0 Client applications only.
Problem types: description: Denial of Service (DoS)
Affected products: vendor: n/a
product: Spring Security OAuth
Published: 2022-04-21T18:16:02.000Z
CVE-2022-22970 
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.
Problem types: cwe_id: CWE-770
description: CWE-770: Allocation of Resources Without Limits or Throttling
Affected products: vendor: n/a
product: Spring Framework
Published: 2022-05-12T19:28:47.000Z
CVE-2022-22971 
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.
Problem types: cwe_id: CWE-770
description: CWE-770: Allocation of Resources Without Limits or Throttling
Affected products: vendor: n/a
product: Spring Framework
Published: 2022-05-12T19:30:49.000Z
CVE-2022-22972 
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Problem types: description: Authentication Bypass
Affected products: vendor: n/a
product: VMware Workspace ONE Access, Identity Manager and vRealize Automation
Published: 2022-05-20T20:18:39.000Z
CVE-2022-22973 
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Problem types: description: Privilege escalation
Affected products: vendor: n/a
product: VMware Workspace ONE Access and Identity Manager.
Published: 2022-05-20T20:18:27.000Z
CVE-2022-22975 
An issue was discovered in the Pinniped Supervisor with either LADPIdentityProvider or ActiveDirectoryIdentityProvider resources. An attack would involve the malicious user changing the common name (CN) of their user entry on the LDAP or AD server to include special characters, which could be used to perform LDAP query injection on the Supervisor's LDAP query which determines their Kubernetes group membership.
Problem types: description: LDAP query injection in Pinniped Supervisor before v0.17.0 causes a malicious user to escalate privileges by changing Kubernetes group memberships when the attacker is also able to edit their own LDAP user entry
Affected products: vendor: n/a
product: Pinniped
Published: 2022-05-11T15:13:50.000Z
CVE-2022-22976 
Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the BCrypt class with the maximum work factor (31), the encoder does not perform any salt rounds, due to an integer overflow error. The default settings are not affected by this CVE.
Problem types: cwe_id: CWE-190
description: CWE-190: Integer Overflow or Wraparound
Affected products: vendor: n/a
product: Spring Security
Published: 2022-05-19T14:50:46.000Z
CVE-2022-22977 
VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or unintended information disclosure.
Problem types: description: XML External Entity (XXE) vulnerability
Affected products: vendor: n/a
product: VMware Tools for Windows
Published: 2022-05-24T18:15:38.000Z
CVE-2022-22978 
In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.
Problem types: cwe_id: CWE-863
description: CWE-863- improper authorization
Affected products: vendor: n/a
product: Spring Security
Published: 2022-05-19T00:00:00.000Z
CVE-2022-22979 
In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condition due to the caching issue in the Function Catalog component of the framework.
Problem types: description: Denial-of-service vulnerability
Affected products: vendor: n/a
product: Spring Cloud Function
Published: 2022-06-21T14:23:38.000Z
CVE-2022-22980 
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
Problem types: description: Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods
Affected products: vendor: n/a
product: Spring Data MongoDB
Published: 2022-06-22T13:56:00.000Z
CVE-2022-22982 
The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.
Problem types: description: Server-side request forgery vulnerability
Affected products: vendor: n/a
product: VMware vCenter Server
Published: 2022-07-13T18:18:58.000Z
CVE-2022-22983 
VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware Workstation.
Problem types: description: Unprotected storage of credentials vulnerability
Affected products: vendor: n/a
product: VMware Workstation
Published: 2022-08-09T20:19:57.000Z
CVE-2022-22984 Command Injection
The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1.24.2; the package snyk-docker-plugin before 5.6.5; the package @snyk/snyk-hex-plugin before 1.1.6 are vulnerable to Command Injection due to an incomplete fix for [CVE-2022-40764](https://security.snyk.io/vuln/SNYK-JS-SNYK-3037342). A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to exploit this vulnerability, a user would have to execute the snyk test command on untrusted files. In most cases, an attacker positioned to control the command line arguments to the Snyk CLI would already be positioned to execute arbitrary commands. However, this could be abused in specific scenarios, such as continuous integration pipelines, where developers can control the arguments passed to the Snyk CLI to leverage this component as part of a wider attack against an integration/build pipeline. This issue has been addressed in the latest Snyk Docker images available at https://hub.docker.com/r/snyk/snyk as of 2022-11-29. Images downloaded and built prior to that date should be updated. The issue has also been addressed in the Snyk TeamCity CI/CD plugin as of version v20221130.093605.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: snyk
vendor: n/a
product: snyk-mvn-plugin
vendor: n/a
product: snyk-gradle-plugin
vendor: n/a
product: @snyk/snyk-cocoapods-plugin
vendor: n/a
product: snyk-sbt-plugin
vendor: n/a
product: snyk-python-plugin
vendor: n/a
product: snyk-docker-plugin
vendor: n/a
product: @snyk/snyk-hex-plugin
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
exploitCodeMaturity: PROOF_OF_CONCEPT
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
baseScore: 5
temporalScore: 4.7
baseSeverity: MEDIUM
temporalSeverity: MEDIUM
Credits: lang: en
value: Ron Masas - Imperva
Published: 2022-11-30T00:00:00.000Z
CVE-2022-22985 ICSA-22-062-01 IPCOMM ipDIO
The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web section where the information is displayed. Injection can be done on specific parameters. The injected code is executed when a legitimate user attempts to review history.
Problem types: cwe_id: CWE-94
description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: IPCOMM
product: IPCOMM ipDIO
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Aarón Flecha Menéndez of S21Sec reported these vulnerabilities to CISA.
Published: 2022-03-09T15:33:40.335Z
CVE-2022-22986 
Netcommunity OG410X and OG810X series (Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi firmware Ver.2.28 and earlier) allow an attacker on the adjacent network to execute an arbitrary OS command via a specially crafted config file.
Problem types: description: OS Command Injection
Affected products: vendor: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION (NTT East) and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION (NTT West)
product: Netcommunity OG410X and OG810X series
Published: 2022-03-31T07:20:41.000Z
CVE-2022-22987 Advantech ADAM-3600
The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to achieve Web Server login and perform further actions.
Problem types: cwe_id: CWE-321
description: CWE-321 Use of Hard-coded Cryptographic Key
Affected products: vendor: Advantech
product: ADAM-3600
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Aagam Shah (neutrinoguy) reported this vulnerability to CISA.
Published: 2022-02-04T22:29:29.468Z
CVE-2022-22988 Insecure file and directory permissions on EdgeRover
File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It would be more difficult for an authenticated attacker to now traverse through the files and directories. This can only be exploited once an attacker has already found a way to get authenticated access to the device.
Problem types: cwe_id: CWE-275
description: CWE-275 Permission Issues
Affected products: vendor: Western Digital
product: EdgeRover
default_status: unaffected
vendor: Western Digital
product: EdgeRover
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 7.7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Published: 2022-01-13T20:27:27.000Z
CVE-2022-22989 Pre-authenticated stack overflow vulnerability on FTP Service
My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by adding defenses against stack overflow issues.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Western Digital
product: My Cloud
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-01-13T20:27:24.000Z