stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-30175 (severity: HIGH, weakness: NVD-CWE-Other)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-30176 (severity: HIGH, weakness: NVD-CWE-Other)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-30177 (severity: HIGH, weakness: NVD-CWE-Other)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-30178 (severity: HIGH, weakness: NVD-CWE-Other)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-30179 (severity: HIGH, weakness: NVD-CWE-Other)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-3018 (severity: MEDIUM, weakness: CWE-532)
An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.
CVE-2022-30180 (severity: HIGH, weakness: NVD-CWE-Other)
Azure RTOS GUIX Studio Information Disclosure Vulnerability
CVE-2022-30181 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-30184 (severity: MEDIUM, weakness: CWE-200)
.NET and Visual Studio Information Disclosure Vulnerability
CVE-2022-30187 (severity: MEDIUM, weakness: CWE-327)
Azure Storage Library Information Disclosure Vulnerability
CVE-2022-30188 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-30189 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability
CVE-2022-3019 (severity: HIGH, weakness: CWE-284)
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't count on it, since it would take a long time to find a valid one).
CVE-2022-30190 (severity: HIGH, weakness: NVD-CWE-Other)
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
CVE-2022-30192 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30193 (severity: HIGH, weakness: NVD-CWE-Other)
AV1 Video Extension Remote Code Execution Vulnerability
CVE-2022-30194 (severity: HIGH, weakness: NVD-CWE-Other)
Windows WebBrowser Control Remote Code Execution Vulnerability
CVE-2022-30196 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Channel Denial of Service Vulnerability
CVE-2022-30197 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Kernel Information Disclosure Vulnerability
CVE-2022-30198 (severity: HIGH, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-30200 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-30202 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-30203 (severity: HIGH, weakness: CWE-863)
Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2022-30205 (severity: MEDIUM, weakness: CWE-362)
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-30206 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-30208 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Security Account Manager (SAM) Denial of Service Vulnerability
CVE-2022-30209 (severity: HIGH, weakness: NVD-CWE-Other)
Windows IIS Server Elevation of Privilege Vulnerability
CVE-2022-3021 (severity: MEDIUM, weakness: CWE-79)
The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-30211 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2022-30212 (severity: MEDIUM, weakness: CWE-362)
Windows Connected Devices Platform Service Information Disclosure Vulnerability
CVE-2022-30213 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows GDI+ Information Disclosure Vulnerability
CVE-2022-30214 (severity: MEDIUM, weakness: CWE-362)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2022-30215 (severity: HIGH, weakness: NVD-CWE-Other)
Active Directory Federation Services Elevation of Privilege Vulnerability
CVE-2022-30216 (severity: HIGH, weakness: CWE-434)
Windows Server Service Tampering Vulnerability
CVE-2022-30220 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-30221 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2022-30222 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Shell Remote Code Execution Vulnerability
CVE-2022-30223 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Hyper-V Information Disclosure Vulnerability
CVE-2022-30224 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-30225 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability
CVE-2022-30226 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-30228 (severity: MEDIUM, weakness: CWE-346)
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.
CVE-2022-30229 (severity: MEDIUM, weakness: CWE-306)
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of an user, such as credentials, in case that user's id is known.
CVE-2022-3023 (severity: MEDIUM, weakness: CWE-134)
Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.
CVE-2022-30230 (severity: CRITICAL, weakness: CWE-306)
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions.
CVE-2022-30231 (severity: MEDIUM, weakness: CWE-402)
A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash.
CVE-2022-30232 (severity: HIGH, weakness: CWE-20)
A CWE-20: Improper Input Validation vulnerability exists that could cause potential remote code execution when an attacker is able to intercept and modify a request on the same network or has configuration access to an ION device on the network. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVE-2022-30233 (severity: MEDIUM, weakness: CWE-20)
A CWE-20: Improper Input Validation vulnerability exists that could allow the product to be maliciously manipulated when the user is tricked into performing certain actions on a webpage. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVE-2022-30234 (severity: CRITICAL, weakness: CWE-798)
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is obtained. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVE-2022-30235 (severity: CRITICAL, weakness: CWE-307)
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an attacker uses brute force. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVE-2022-30236 (severity: HIGH, weakness: CWE-669)
A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses cross-domain attacks. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVE-2022-30237 (severity: HIGH, weakness: CWE-311)
A CWE-311: Missing Encryption of Sensitive Data vulnerability exists that could allow authentication credentials to be recovered when an attacker breaks the encoding. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVE-2022-30238 (severity: HIGH, weakness: CWE-287)
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)
CVE-2022-30239 (severity: HIGH, weakness: CWE-88)
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971.
CVE-2022-3024 (severity: MEDIUM, weakness: CWE-352)
The Simple Bitcoin Faucets WordPress plugin through 1.7.0 does not have any authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscribers to call it and add/delete/edit Bonds. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
CVE-2022-30240 (severity: HIGH, weakness: CWE-88)
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift JDBC Driver 1.2.40 through 1.2.55 may allow a local user to execute code. NOTE: this is different from CVE-2022-29972.
CVE-2022-30241 (severity: MEDIUM, weakness: CWE-79)
The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.
CVE-2022-30242 (severity: MEDIUM, weakness: NVD-CWE-Other)
Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller configuration without the knowledge of other users, altering the controller's function capabilities. The changed configuration is not updated in the User Interface, which creates an inconsistency between the configuration display and the actual configuration on the controller. After the configuration change, remediation requires reverting to the correct configuration, requiring either physical or remote access depending on the configuration that was altered.
CVE-2022-30243 (severity: HIGH, weakness: CWE-829)
Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the knowledge of other users, altering the controller's function. After the programming change, the program needs to be overwritten in order for the controller to restore its original operational function.
CVE-2022-30244 (severity: HIGH, weakness: CWE-829)
Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the knowledge of other users, altering the controller's function. After the programming change, the program needs to be overwritten in order for the controller to restore its original operational function.
CVE-2022-30245 (severity: MEDIUM, weakness: CWE-610)
Honeywell Alerton Compass Software 1.6.5 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller configuration without the knowledge of other users, altering the controller's function capabilities. The changed configuration is not updated in the User Interface, which creates an inconsistency between the configuration display and the actual configuration on the controller. After the configuration change, remediation requires reverting to the correct configuration, requiring either physical or remote access depending on the configuration that was altered.
CVE-2022-3025 (severity: MEDIUM, weakness: CWE-79)
The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
CVE-2022-30256 (severity: HIGH, weakness: CWE-672)
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
CVE-2022-30257 (severity: CRITICAL, weakness: CWE-706)
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
CVE-2022-30258 (severity: CRITICAL, weakness: CWE-706)
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
CVE-2022-3026 (severity: HIGH, weakness: CWE-1236)
The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via the 'Export Users' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into profile information like First Names that will embed into the exported CSV file triggered by an administrator and can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
CVE-2022-30260 (severity: HIGH, weakness: CWE-345)
Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards.
CVE-2022-30262 (severity: HIGH, weakness: CWE-345)
The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.
CVE-2022-30264 (severity: CRITICAL, weakness: CWE-345)
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol (4000/TCP, 5000/TCP) for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the flash filesystem and carrying out arbitrary file and directory read, write, and delete operations.
CVE-2022-30269 (severity: HIGH, weakness: CWE-345)
Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images (as PLX/DAT/APP/CRC files) are uploaded via the Web UI. In case of the C toolkit, they are transferred and installed using SFTP/SSH. In each case, application images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.
CVE-2022-3027 (severity: MEDIUM, weakness: CWE-284)
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, the device can be exploited to write arbitrary files or display incorrect information.
CVE-2022-30270 (severity: CRITICAL, weakness: CWE-287)
The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface on port 22/TCP. This interface is used for remote maintenance and for SFTP file-transfer operations that are part of engineering software functionality. Access to this interface is controlled by 5 preconfigured accounts (root, abuilder, acelogin, cappl, ace), all of which come with default credentials. Although the ACE1000 documentation mentions the root, abuilder and acelogin accounts and instructs users to change the default credentials, the cappl and ace accounts remain undocumented and thus are unlikely to have their credentials changed.
CVE-2022-30271 (severity: CRITICAL, weakness: CWE-798)
The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as /etc/init.d/sshd_service) only generate a new key if no private-key file exists. Thus, this hardcoded key is likely to be used by default.
CVE-2022-30272 (severity: HIGH, weakness: CWE-345)
The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or ACE1000 Easy Configurator for performing firmware updates. In case of the Easy Configurator, firmware updates are performed through access to the Web UI where file system, kernel, package, bundle, or application images can be installed. Firmware updates for the Front End Processor (FEP) module are performed via access to the SSH interface (22/TCP), where a .hex file image is transferred and a bootloader script invoked. File system, kernel, package, and bundle updates are supplied as RPM (RPM Package Manager) files while FEP updates are supplied as S-rec files. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.
CVE-2022-30273 (severity: CRITICAL, weakness: CWE-327)
The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in ECB mode. This mode of operation does not offer message integrity and offers reduced confidentiality above the block level, as demonstrated by an ECB Penguin attack against any block ciphers.
CVE-2022-30274 (severity: CRITICAL, weakness: CWE-798)
The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with an XRT LAN-to-radio gateway by means of an embedded client. Credentials for accessing this gateway are stored after being encrypted with the Tiny Encryption Algorithm (TEA) in ECB mode using a hardcoded key. Similarly, the ACE1000 RTU can route MDLC traffic over Extended Command and Management Protocol (XCMP) and Network Layer (XNL) networks via the MDLC driver. Authentication to the XNL port is protected by TEA in ECB mode using a hardcoded key.
CVE-2022-30275 (severity: HIGH, weakness: CWE-312)
The Motorola MOSCAD Toolbox software through 2022-05-02 relies on a cleartext password. It utilizes an MDLC driver to communicate with MOSCAD/ACE RTUs for engineering purposes. Access to these communications is protected by a password stored in cleartext in the wmdlcdrv.ini driver configuration file. In addition, this password is used for access control to MOSCAD/STS projects protected with the Legacy Password feature. In this case, an insecure CRC of the password is present in the project file: this CRC is validated against the password in the driver configuration file.
CVE-2022-30276 (severity: HIGH, weakness: CWE-306)
The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 omit an authentication requirement. They feature IP Gateway modules which allow for interfacing between Motorola Data Link Communication (MDLC) networks (potentially over a variety of serial, RF and/or Ethernet links) and TCP/IP networks. Communication with RTUs behind the gateway is done by means of the proprietary IPGW protocol (5001/TCP). This protocol does not have any authentication features, allowing any attacker capable of communicating with the port in question to invoke (a subset of) desired functionality.
CVE-2022-30277 (severity: MEDIUM, weakness: CWE-613)
BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).
CVE-2022-30278 (severity: MEDIUM, weakness: CWE-79)
A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting attack. The vulnerability is due to improper validation of user-supplied input to MadCap Flare's framework embedded within Black Duck Hub's Help Documentation to supply content. An attacker could exploit this vulnerability by convincing a user to click a link designed to pass malicious input to the interface. A successful exploit could allow the attacker to conduct cross-site scripting attacks and gain access to sensitive browser-based information.