rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-41690 
Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-284
description: Improper access control
Affected products: vendor: n/a
product: Intel(R) Retail Edge Mobile iOS application
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 7.1
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
Published: 2023-05-10T13:17:00.283Z
CVE-2022-41691 BIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691
When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.
Problem types: cwe_id: CWE-763
description: CWE-763 Release of Invalid Pointer or Reference
Affected products: vendor: F5
product: BIG-IP Advanced WAF & ASM
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
Credits: lang: en
value: This issue was discovered internally by F5.
Published: 2022-10-19T21:19:45.651Z
CVE-2022-41692 WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability
Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: CodePeople
product: Appointment Hour Booking (WordPress plugin)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Vulnerability discovered by Lana Codes (Patchstack Alliance)
Published: 2022-11-18T18:54:29.858Z
CVE-2022-41693 
Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-427
description: Uncontrolled search path
Affected products: vendor: n/a
product: Intel(R) Quartus(R) Prime Pro edition software
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2023-05-10T13:17:22.891Z
CVE-2022-41694 BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694
In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and BIG-IQ versions 8.x before 8.2.0.1 and all versions of 7.x, when an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed input can cause MCPD to terminate.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: F5
product: BIG-IP
vendor: F5
product: BIG-IQ
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
Credits: lang: en
value: This issue was discovered internally by F5.
Published: 2022-10-19T21:20:06.272Z
CVE-2022-41695 WordPress Traffic Manager Plugin <= 1.4.5 is vulnerable to Broken Access Control
Missing Authorization vulnerability in SedLex Traffic Manager.This issue affects Traffic Manager: from n/a through 1.4.5.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: SedLex
product: Traffic Manager
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: István Márton (Patchstack Alliance)
Published: 2024-01-17T17:09:02.699Z
CVE-2022-41696 CVE-2022-41696
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
Problem types: description: CWE-611
Affected products: vendor: VISAM
product: VBASE
Published: 2023-03-21T22:19:30.671Z
CVE-2022-41697 
A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability.
Problem types: cwe_id: CWE-204
description: CWE-204: Response Discrepancy Information Exposure
Affected products: vendor: Ghost Foundation
product: Ghost
Published: 2022-12-23T23:03:51.372Z
CVE-2022-41698 WordPress If Menu – Visibility control for Menus plugin <= 0.16.3 - Broken Access Control
Missing Authorization vulnerability in Layered If Menu.This issue affects If Menu: from n/a through 0.16.3.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Layered
product: If Menu
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: Tien Nguyen Anh (Patchstack Alliance)
Published: 2024-04-17T10:13:13.715Z
CVE-2022-41699 
Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-732
description: Incorrect permission assignment for critical resource
Affected products: vendor: n/a
product: Intel(R) QAT drivers for Windows
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 8.2
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2023-05-10T13:17:16.651Z
CVE-2022-41700 
Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-277
description: Insecure inherited permissions
Affected products: vendor: n/a
product: Intel(R) NUC Pro Software Suite installation software
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
Published: 2023-11-14T19:04:45.324Z
CVE-2022-41701 Delta Electronics DIAEnergie
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Delta Electronics
product: DIAEnergie
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 8.7
baseSeverity: HIGH
Credits: lang: en
value: Michael Heinzl reported these vulnerabilities to CISA.
Published: 2022-10-27T20:15:38.365Z
CVE-2022-41702 Delta Electronics DIAEnergie
The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Delta Electronics
product: DIAEnergie
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 8.7
baseSeverity: HIGH
Credits: lang: en
value: Michael Heinzl reported these vulnerabilities to CISA.
Published: 2022-10-27T20:15:39.344Z
CVE-2022-41703 Apache Superset: SQL injection vulnerability in adhoc clauses
A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the feature flag "ALLOW_ADHOC_SUBQUERY" disabled (default value).  This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.



Problem types: description: SQL injection in certain query object fields
Affected products: vendor: Apache Software Foundation
product: Apache Superset
default_status: unaffected
Credits: lang: en
value: Mingyu Son
Published: 2023-01-16T10:14:01.332Z
CVE-2022-41704 Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input
A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.
Problem types: description: A jar file can be loaded from svg script element
Affected products: vendor: Apache Software Foundation
product: Apache XML Graphics
Credits: lang: en
value: This issue was independently reported by 4ra1n of Chaitin Tech and pwnull
Published: 2022-10-25T00:00:00.000Z
CVE-2022-41705 
Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.
Problem types: description: Remote command execution
Affected products: vendor: n/a
product: Badaso
Published: 2022-11-25T00:00:00.000Z
CVE-2022-41706 Browsershot 3.57.2 - Server Side XSS to LFR via URL
Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the URL protocol passed to the Browsershot::url method.
Problem types: description: Server Side XSS
Affected products: vendor: n/a
product: Browsershot
default_status: unaffected
Published: 2022-11-25T00:00:00.000Z
CVE-2022-41707 
Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user of the application. This is possible because the application exposes user data to the public.
Problem types: description: Improper authorization control for web services
Affected products: vendor: n/a
product: relatedcode/Messenger
Published: 2022-10-19T00:00:00.000Z
CVE-2022-41708 
Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the workspaces of any user of the application. This is possible because the application does not validate permissions correctly.
Problem types: description: Improper authorization control for web services
Affected products: vendor: n/a
product: relatedcode/Messenger
Published: 2022-10-19T00:00:00.000Z
CVE-2022-41709 
Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "nodeIntegration" option enabled.
Problem types: description: Remote command execution (RCE)
Affected products: vendor: n/a
product: Markdownify
Published: 2022-10-19T00:00:00.000Z
CVE-2022-41710 
Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy (or at least not strict enough) and/or does not properly validate the contents of markdown files before rendering them.
Problem types: description: Insecure or unset HTTP headers - Content-Security-Policy
Affected products: vendor: n/a
product: Markdownify
Published: 2022-11-03T00:00:00.000Z
CVE-2022-41711 
Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.
Problem types: description: Remote command execution (RCE)
Affected products: vendor: n/a
product: Badaso
Published: 2022-10-25T00:00:00.000Z
CVE-2022-41712 
Frappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not correctly validate the information injected by the user in the import_file parameter.
Problem types: description: Lack of data validation - Path Traversal
Affected products: vendor: n/a
product: Frappe
Published: 2022-11-25T00:00:00.000Z
CVE-2022-41713 deep-object-diff 1.1.0 - Prototype Pollution
deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the '__proto__' property to be edited.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: deep-object-diff
default_status: unaffected
Published: 2022-11-03T00:00:00.000Z
CVE-2022-41714 fastest-json-copy 1.0.1 - Prototype Pollution
fastest-json-copy version 1.0.1 allows an external attacker to edit or add new properties to an object. This is possible because the application does not correctly validate the incoming JSON keys, thus allowing the '__proto__' property to be edited.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: fastest-json-copy
default_status: unaffected
Published: 2022-11-03T00:00:00.000Z
CVE-2022-41715 Memory exhaustion when compiling regular expressions in regexp/syntax
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.
Problem types: description: CWE 400: Uncontrolled Resource Consumption
Affected products: vendor: Go standard library
product: regexp/syntax
default_status: unaffected
Credits: lang: en
value: Adam Korczynski (ADA Logics)
lang: en
value: OSS-Fuzz
Published: 2022-10-14T00:00:00.000Z
CVE-2022-41716 Unsanitized NUL in environment variables on Windows in syscall and os/exec
Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid environment variable values containing NUL values are not properly checked for. A malicious environment variable value can exploit this behavior to set a value for a different environment variable. For example, the environment variable string "A=B\x00C=D" sets the variables "A=B" and "C=D".
Problem types: description: CWE-158: Improper Neutralization of Null Byte or NUL Character
Affected products: vendor: Go standard library
product: syscall
default_status: unaffected
vendor: Go standard library
product: os/exec
default_status: unaffected
Credits: lang: en
value: RyotaK (https://twitter.com/ryotkak)
Published: 2022-11-02T15:28:19.574Z
CVE-2022-41717 Excessive memory growth in net/http and golang.org/x/net/http2
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.
Problem types: description: CWE 400: Uncontrolled Resource Consumption
Affected products: vendor: Go standard library
product: net/http
default_status: unaffected
vendor: golang.org/x/net
product: golang.org/x/net/http2
default_status: unaffected
Credits: lang: en
value: Josselin Costanzi
Published: 2022-12-08T19:03:53.161Z
CVE-2022-41719 Panic in github.com/shamaton/msgpack/v2
Unmarshal can panic on some inputs, possibly allowing for denial of service attacks.
Problem types: description: CWE 400: Uncontrolled Resource Consumption
Affected products: vendor: github.com/shamaton/msgpack/v2
product: github.com/shamaton/msgpack/v2
default_status: unaffected
Credits: lang: en
value: Red Canary
Published: 2022-11-10T19:57:01.274Z
CVE-2022-41720 Restricted file access on Windows in os and net/http
On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS("C:/tmp").Open("COM1") opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS("") has changed. Previously, an empty root was treated equivalently to "/", so os.DirFS("").Open("tmp") would open the path "/tmp". This now returns an error.
Problem types: description: CWE 22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Go standard library
product: os
default_status: unaffected
vendor: Go standard library
product: net/http
default_status: unaffected
Published: 2022-12-07T16:11:18.867Z
CVE-2022-41721 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c
A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of the HTTP request, which could be attacker-manipulated to represent arbitrary HTTP2 requests.
Problem types: description: CWE 444: Inconsistent Interpretation of HTTP Requests ("HTTP Request/Response Smuggling)
Affected products: vendor: golang.org/x/net
product: golang.org/x/net/http2/h2c
default_status: unaffected
Credits: lang: en
value: John Howard (Google)
Published: 2023-01-13T22:46:22.064Z
CVE-2022-41722 Path traversal on Windows in path/filepath
A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as "a/../c:/b" into the valid path "c:\b". This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path ".\c:\b".
Problem types: description: CWE-22: Improper Limitation of a Pathname to a Restricted
Directory ("Path Traversal")

Affected products: vendor: Go standard library
product: path/filepath
default_status: unaffected
Credits: lang: en
value: RyotaK (https://ryotak.net)
Published: 2023-02-28T17:19:41.324Z
CVE-2022-41723 Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
Problem types: description: CWE 400: Uncontrolled Resource Consumption
Affected products: vendor: Go standard library
product: net/http
default_status: unaffected
vendor: golang.org/x/net
product: golang.org/x/net/http2
default_status: unaffected
vendor: golang.org/x/net
product: golang.org/x/net/http2/hpack
default_status: unaffected
Credits: lang: en
value: Philippe Antoine (Catena cyber)
Published: 2023-02-28T17:19:45.801Z
CVE-2022-41724 Panic on large handshake records in crypto/tls
Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).
Problem types: description: CWE-400: Uncontrolled Resource Consumption
Affected products: vendor: Go standard library
product: crypto/tls
default_status: unaffected
Credits: lang: en
value: Marten Seemann
Published: 2023-02-28T17:19:44.420Z