rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-34889 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the ACPI virtual device. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-16554.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Parallels
product: Desktop
Credits: lang: en
value: Ben McBride
Published: 2022-07-15T20:10:32.000Z
CVE-2022-34890 
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Parallels Tools component. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-16653.
Problem types: cwe_id: CWE-822
description: CWE-822: Untrusted Pointer Dereference
Affected products: vendor: Parallels
product: Desktop
Credits: lang: en
value: Meysam Firouzi of Mbition mercedes-benz innovation lab
Published: 2022-07-15T20:11:17.000Z
CVE-2022-34891 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update machanism. The product sets incorrect permissions on sensitive files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16395.
Problem types: cwe_id: CWE-732
description: CWE-732: Incorrect Permission Assignment for Critical Resource
Affected products: vendor: Parallels
product: Desktop
Credits: lang: en
value: aegis
Published: 2022-07-15T20:12:00.000Z
CVE-2022-34892 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update machanism. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16396.
Problem types: cwe_id: CWE-362
description: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: Parallels
product: Desktop
Credits: lang: en
value: aegis
Published: 2022-07-18T14:17:35.000Z
CVE-2022-34893 
Trend Micro Security 2022 (consumer) has a link following vulnerability where an attacker with lower privileges could manipulate a mountpoint which could lead to escalation of privilege on an affected machine.
Problem types: description: Link Following LPE
Affected products: vendor: Trend Micro
product: Trend Micro Security (Consumer)
Published: 2022-09-19T18:00:57.000Z
CVE-2022-34894 
In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: JetBrains
product: Hub
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Yurii Sanin
Published: 2022-07-01T09:00:15.000Z
CVE-2022-34899 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Parallels service. By creating a symbolic link, an attacker can abuse the service to execute a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16134.
Problem types: cwe_id: CWE-367
description: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products: vendor: Parallels
product: Access
Credits: lang: en
value: Reno Robert of Trend Micro Zero Day Initiative
Published: 2022-07-18T14:17:40.000Z
CVE-2022-34900 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Dispatcher service. The service loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-15213.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: Parallels
product: Access
Credits: lang: en
value: Xavier Danest - Decathlon
Published: 2022-07-18T14:17:46.000Z
CVE-2022-34901 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Parallels Service. The service executes files from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16137.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: Parallels
product: Access
Credits: lang: en
value: Reno Robert of Trend Micro Zero Day Initiative
Published: 2022-07-18T14:17:51.000Z
CVE-2022-34902 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Desktop Control Agent service. The service loads Qt plugins from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-15787.
Problem types: cwe_id: CWE-427
description: CWE-427: Uncontrolled Search Path Element
Affected products: vendor: Parallels
product: Access
Credits: lang: en
value: Xavier Danest - Decathlon
Published: 2022-07-18T14:17:56.000Z
CVE-2022-34903 
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-01T21:05:18.000Z
CVE-2022-34906 
A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to decrypt sensitive information saved in FileWave, and even send crafted requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-25T20:26:14.000Z
CVE-2022-34907 
An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to gain access to the system with the highest authority possible and gain full control over the FileWave platform.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-25T20:17:44.000Z
CVE-2022-34908 
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization to retrieve application data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 8.2
baseSeverity: HIGH
Published: 2023-02-27T00:00:00.000Z
CVE-2022-34909 
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:L/A:N/C:H/I:H/PR:N/S:U/UI:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 7.7
baseSeverity: HIGH
Published: 2023-02-27T00:00:00.000Z
CVE-2022-34910 
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:H/AV:L/A:N/C:H/I:N/PR:H/S:U/UI:N
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 4.1
baseSeverity: MEDIUM
Published: 2023-02-27T00:00:00.000Z
CVE-2022-34911 
An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After account creation, when it sets the page title to "Welcome" followed by the username, the username is not escaped: SpecialCreateAccount::successfulAction() calls ::showSuccessPage() with a message as second parameter, and OutputPage::setPageTitle() uses text().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-02T00:00:00.000Z
CVE-2022-34912 
An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Contributions, is used as page title without escaping. Hence, in a non-default configuration where a username contains HTML entities, it won't be escaped.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-02T00:00:00.000Z
CVE-2022-34913 
md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-02T19:28:39.000Z
CVE-2022-34914 
Webswing before 22.1.3 allows X-Forwarded-For header injection. The client IP address is associated with a variable in the configuration page. The {clientIp} variable can be used as an application startup argument. The X-Forwarded-For header can be manipulated by a client to store an arbitrary value that is used to replace the clientIp variable (without sanitization). A client can thus inject multiple arguments into the session startup. Systems that do not use the clientIP variable in the configuration are not vulnerable. The vulnerability is fixed in these versions: 20.1.16, 20.2.19, 21.1.8, 21.2.12, and 22.1.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-08T18:38:49.000Z
CVE-2022-34916 Improper Input Validation (JNDI Injection) in JMSMessageConsumer
Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache Flume
Credits: lang: en
value: Apache Flume would like to thank Frentzen Amaral for reporting this issue.
Published: 2022-08-21T08:15:19.000Z
CVE-2022-34917 Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers
A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and causing denial of service. Example scenarios: - Kafka cluster without authentication: Any clients able to establish a network connection to a broker can trigger the issue. - Kafka cluster with SASL authentication: Any clients able to establish a network connection to a broker, without the need for valid SASL credentials, can trigger the issue. - Kafka cluster with TLS authentication: Only clients able to successfully authenticate via TLS can trigger the issue. We advise the users to upgrade the Kafka installations to one of the 3.2.3, 3.1.2, 3.0.2, 2.8.2 versions.
Problem types: cwe_id: CWE-789
description: CWE-789: Memory Allocation with Excessive Size Value
Affected products: vendor: Apache Software Foundation
product: Apache Kafka
Credits: lang: en
value: Apache Kafka would like to thank Mickael Maison, Tom Bentley and Daniel Collins for reporting this issue.
Published: 2022-09-20T08:35:07.000Z
CVE-2022-34918 
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-04T20:07:32.000Z
CVE-2022-34919 
The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-23T00:57:38.000Z
CVE-2022-34924 
Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T19:06:28.000Z
CVE-2022-34927 
MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T00:19:45.000Z
CVE-2022-34928 
JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T00:26:38.000Z
CVE-2022-34937 
Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T00:50:03.000Z
CVE-2022-34945 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:01.000Z
CVE-2022-34946 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:02.000Z
CVE-2022-34947 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcategory.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:03.000Z
CVE-2022-34948 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbrand.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:04.000Z
CVE-2022-34949 
Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:05.000Z
CVE-2022-34950 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:06.000Z
CVE-2022-34951 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:06.000Z
CVE-2022-34952 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:07.000Z
CVE-2022-34953 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:29.000Z
CVE-2022-34954 
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:13.000Z
CVE-2022-34955 
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_topusers.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:13.000Z
CVE-2022-34956 
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-02T02:54:35.000Z
CVE-2022-34960 
The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T01:50:03.000Z
CVE-2022-34961 
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Users Timeline module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-25T14:39:27.000Z
CVE-2022-34962 
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-25T17:17:53.000Z
CVE-2022-34963 
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the News Feed module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-25T14:30:39.000Z
CVE-2022-34964 
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the SitePages module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-25T14:52:25.000Z
CVE-2022-34965 
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /ossn/administrator/com_installer. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Note: The project owner believes this is intended behavior of the application as it only allows authenticated admins to upload files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-25T00:00:00.000Z
CVE-2022-34966 
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ip_address/:port/ossn/home.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-25T18:35:34.000Z
CVE-2022-34967 
The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T01:48:59.000Z
CVE-2022-34968 
An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service (DoS) via a SQL query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T01:49:13.000Z
CVE-2022-34969 
PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T01:49:02.000Z
CVE-2022-34970 
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-04T18:39:06.000Z
CVE-2022-34971 
An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-27T01:15:44.000Z
CVE-2022-34972 
So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the att_value_id , manu_value_id , opt_value_id , and subcate_value_id parameters at /index.php?route=extension/module/so_filter_shop_by/filter_data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-05T19:27:20.000Z
CVE-2022-34973 
D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-03T14:06:44.000Z