yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-2325: The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks when, stored cross-site scripting, unfiltered_html capability
CVE-2022-23252: Microsoft Office Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-23253: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Key phrases: windows point-to-point tunneling protocol, denial of service
CVE-2022-23254: Microsoft Power BI Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-23255: Microsoft OneDrive for Android Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2022-23256: Azure Data Explorer Spoofing Vulnerability
Key phrases: spoofing
CVE-2022-23257: Windows Hyper-V Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-23258: Microsoft Edge for Android Spoofing Vulnerability
Key phrases: spoofing
CVE-2022-23259: Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-2326: An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible to gain access to a private project through an email invite by using other user's email address as an unverified secondary email.
Key phrases: gain access, unverified secondary email
CVE-2022-23261: Microsoft Edge (Chromium-based) Tampering Vulnerability
Key phrases: tampering
CVE-2022-23262: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23263: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23264: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Key phrases: spoofing
CVE-2022-23265: Microsoft Defender for IoT Remote Code Execution Vulnerability
Key phrases: iot remote code execution
CVE-2022-23266: Microsoft Defender for IoT Elevation of Privilege Vulnerability
Key phrases: iot elevation of privilege
CVE-2022-23267: .NET and Visual Studio Denial of Service Vulnerability
Key phrases: denial of service
CVE-2022-23268: Windows Hyper-V Denial of Service Vulnerability
Key phrases: denial of service
CVE-2022-23269: Microsoft Dynamics GP Spoofing Vulnerability
Key phrases: spoofing
CVE-2022-2327: io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859
Key phrases: double free
CVE-2022-23270: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Key phrases: windows point-to-point tunneling protocol remote code execution
CVE-2022-23271: Microsoft Dynamics GP Elevation Of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23272: Microsoft Dynamics GP Elevation Of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23273: Microsoft Dynamics GP Elevation Of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23274: Microsoft Dynamics GP Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-23276: SQL Server for Linux Containers Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23277: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-23278: Microsoft Defender for Endpoint Spoofing Vulnerability
Key phrases: endpoint spoofing
CVE-2022-23279: Windows ALPC Elevation of Privilege Vulnerability
Key phrases: windows alpc elevation of privilege
CVE-2022-2328: The Flexi Quote Rotator WordPress plugin through 0.9.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Key phrases: perform Cross-Site Scripting attacks even when, cross-site scripting, unfiltered_html capability
CVE-2022-23280: Microsoft Outlook for Mac Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2022-23281: Windows Common Log File System Driver Information Disclosure Vulnerability
Key phrases: driver information disclosure
CVE-2022-23282: Paint 3D Remote Code Execution Vulnerability
Key phrases: paint remote code execution
CVE-2022-23283: Windows ALPC Elevation of Privilege Vulnerability
Key phrases: windows alpc elevation of privilege
CVE-2022-23284: Windows Print Spooler Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23285: Remote Desktop Client Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-23286: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Key phrases: windows cloud files mini filter driver elevation of privilege
CVE-2022-23287: Windows ALPC Elevation of Privilege Vulnerability
Key phrases: windows alpc elevation of privilege
CVE-2022-23288: Windows DWM Core Library Elevation of Privilege Vulnerability
Key phrases: windows dwm core library elevation of privilege
CVE-2022-2329: A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)
Key phrases: cwe-190, integer overflow, wraparound, heap-based buffer overflow, denial of service, heap based buffer overflow, remote code execution
CVE-2022-23290: Windows Inking COM Elevation of Privilege Vulnerability
Key phrases: com elevation of privilege
CVE-2022-23291: Windows DWM Core Library Elevation of Privilege Vulnerability
Key phrases: windows dwm core library elevation of privilege
CVE-2022-23292: Microsoft Power BI Spoofing Vulnerability
Key phrases: microsoft power bi spoofing
CVE-2022-23293: Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23294: Windows Event Tracing Remote Code Execution Vulnerability
Key phrases: windows event tracing remote code execution
CVE-2022-23295: Raw Image Extension Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-23296: Windows Installer Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-23297: Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-23298: Windows NT OS Kernel Elevation of Privilege Vulnerability
Key phrases: kernel elevation of privilege
CVE-2022-23299: Windows PDEV Elevation of Privilege Vulnerability
Key phrases: windows pdev elevation of privilege
CVE-2022-2330: Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local service that the attacker wouldn't usually have access to via a carefully constructed XML file, which the DLP Agent doesn't parse correctly.
Key phrases: cause the DLP Agent to access a local, xml external entity reference
CVE-2022-23300: Raw Image Extension Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-23301: HEVC Video Extensions Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-23302: JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBindingName configuration causing JMSSink to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-4104. Note this issue only affects Log4j 1.x when specifically configured to use JMSSink, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
Key phrases: deserialization, remote code execution, deserialization of untrusted data
CVE-2022-23303: The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.
Key phrases: side channel, cache access patterns
CVE-2022-23304: The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
Key phrases: side-channel, cache access patterns
CVE-2022-23305: By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
Key phrases: manipulate the SQL by entering crafted strings into, be executed, unintended sql queries
CVE-2022-23307: CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Key phrases: deserialization issue
CVE-2022-23308: valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Key phrases: use-after-free, use after free
CVE-2022-23312: A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.
Key phrases: cross-site scripting (xss), unsuspecting users
CVE-2022-23314: MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.
Key phrases: sql injection
CVE-2022-23315: MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.
Key phrases: arbitrary file upload
CVE-2022-23316: An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.
Key phrases: arbitrary file read
CVE-2022-23317: CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.
Key phrases: obtain relevant information
CVE-2022-23318: A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.
Key phrases: trigger unsafe memory access via a specially crafted, heap-buffer-overflow, out-of-bound read, information disclosure, context-dependent impact, heap buffer overflow, out of bound read, application crash
CVE-2022-23319: A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent downstream components.
Key phrases: trigger a program crash via a specially crafted, segmentation fault, availability of the software and dependent downstream components
CVE-2022-2332: A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment.
Key phrases: insecure permission assignment
CVE-2022-23320: XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.
Key phrases: generate reports based on raw SQL queries, default administrative credentials, sensitive information
CVE-2022-23321: A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.
Key phrases: cross-site scripting (xss)
CVE-2022-23327: A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).
Key phrases: denial of service (DoS), send 5120 future transactions with a high gas, design flaw, denial of service (dos)
CVE-2022-23328: A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and then occupy the memory pool to prevent new transactions from entering the pool, resulting in a denial of service (DoS).
Key phrases: denial of service (DoS), send 5120 pending transactions of a high gas, design flaw, denial of service (dos)
CVE-2022-23329: A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.
Key phrases: execute arbitrary commands, execute arbitrary commands via uploading malicious files
CVE-2022-2333: If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 applications context and permissions.
Key phrases: code execution
CVE-2022-23330: A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted JAR package, remote code execution (rce)
CVE-2022-23331: In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password.
Key phrases: gain unauthorized access
CVE-2022-23332: Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.
Key phrases: inject arbitrary code, inject arbitrary code via the field, command injection
CVE-2022-23334: The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.
Key phrases: have write access and escalate privileges via replacing, weak signature checks
CVE-2022-23335: Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParameter.
Key phrases: sql injection
CVE-2022-23336: S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id parameter.
Key phrases: sql injection
CVE-2022-23337: DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids parameter.
Key phrases: sql injection
CVE-2022-2334: The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22.
Key phrases: execute arbitrary code
CVE-2022-23340: Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
Key phrases: execute system commands through malicious code in user, user search results
CVE-2022-23342: The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users by sending a POST login request to the /mobilebroker/ServiceToBroker.svc/Json/Connect endpoint. This can lead to user enumeration against the underlying Active Directory integrated systems.
Key phrases: obtain valid users based on the response returned, username enumeration, user enumeration
CVE-2022-23345: BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
Key phrases: incorrect access control
CVE-2022-23346: BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
Key phrases: access control issues, incorrect access control
CVE-2022-23347: BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.
Key phrases: directory traversal
CVE-2022-23348: BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.
Key phrases: weak password hashes
CVE-2022-23349: BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).
Key phrases: cross-site request forgery (csrf)
CVE-2022-2335: A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
Key phrases: denial-of-service condition, denial of service
CVE-2022-23350: BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.
Key phrases: cross-site scripting (xss)
CVE-2022-23352: An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
Key phrases: Denial of Service (DoS), denial of service (dos)
CVE-2022-23357: mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.
Key phrases: directory traversal
CVE-2022-23358: EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement.
Key phrases: construct a SQL statement, sql injection
CVE-2022-2336: Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required.
Key phrases: log in to the server directly to perform, default password
CVE-2022-23363: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.
Key phrases: sql injection
CVE-2022-23364: HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php.
Key phrases: sql injection
CVE-2022-23365: HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php.
Key phrases: sql injection
CVE-2022-23366: HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
Key phrases: sql injection
CVE-2022-23367: Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.
Key phrases: inject malicious code into a victim user's, dom-based cross-site scripting (xss), victim users device
CVE-2022-2337: A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.
Key phrases: missing http uri, denial-of-service condition, denial of service
CVE-2022-23375: WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
Key phrases: remote code execution
CVE-2022-23376: WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
Key phrases: reflected xss
CVE-2022-23377: Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.
Key phrases: retrieve local files, local file inclusion
CVE-2022-23378: A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/allergens/edit/1 is vulnerable.
Key phrases: cross-site scripting (xss)
CVE-2022-23379: Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().
Key phrases: sql injection
CVE-2022-2338: Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration interface is accessible via plaintext HTTP protocol, facilitating the attack. The HTTP request may contain the session cookie in the request, which may be captured for use in authenticating to the server.
Key phrases: bypass via a machine-in-the, authentication bypass, machine-in-the-middle
CVE-2022-23380: There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.
Key phrases: sql injection
CVE-2022-23382: Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network.
Key phrases: denial of service
CVE-2022-23383: YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non login status because real authentication is not carried out.
Key phrases: unauthorized access
CVE-2022-23384: YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add
Key phrases: cross site request forgery (csrf)
CVE-2022-23387: An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field.
Key phrases: obtain database, sql blind injection
CVE-2022-23389: PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.
Key phrases: remote code execution (rce)
CVE-2022-2339: With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.
Key phrases: ssrf, leak, sensitive information
CVE-2022-23390: An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files.
Key phrases: upload arbitrary files
CVE-2022-23391: A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-23395: jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).
Key phrases: prototype pollution, dom cross-site scripting (xss)
CVE-2022-23397: The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. NOTE: the vendor disputes this because the ado.im reference has "no clear steps of reproduction."
Key phrases: reflected cross-site scripting
CVE-2022-23399: A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
Key phrases: stack-based buffer overflow, malicious packet, stack based buffer overflow
CVE-2022-2340: The W-DALIL WordPress plugin through 2.0 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks when, stored cross-site scripting
CVE-2022-23400: A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
Key phrases: stack-based buffer overflow, denial of service, information leak, malicious file, stack based buffer overflow
CVE-2022-23401: The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.
Key phrases: insecure dll loading issues
CVE-2022-23402: The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00
Key phrases: hard coded password
CVE-2022-23403: Improper input validation in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access.
Key phrases: potentially enable denial of service via local access, improper input validation
CVE-2022-23408: wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.
Key phrases: connections, misplaced memory initialization
CVE-2022-23409: The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.
Key phrases: read arbitrary files, read arbitrary files via input to actionStream in, logs plugin
CVE-2022-2341: The Simple Page Transition WordPress plugin through 1.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks when, stored cross-site scripting, unfiltered_html capability
CVE-2022-23410: AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.
Key phrases: load DLLs from its current working directory which, for remote code execution if a compromised DLL, local privilege escalation, dll hijacking, compromised dll
CVE-2022-2342: Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to v0.64.4.
Key phrases: cross-site scripting (xss)
CVE-2022-23425: Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.
Key phrases: send arbitrary NAS, send arbitrary NAS signaling messages with fake base, improper input validation
CVE-2022-23426: A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege.
Key phrases: access files with system privilege, pendingintent
CVE-2022-23427: PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent.
Key phrases: access media files without permission via implicit Intent, pendingintent hijacking
CVE-2022-23428: An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
Key phrases: allows arbitrary memory, arbitrary memory write and code execution
CVE-2022-23429: An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash.
Key phrases: read invalid memory and it leads to application, application crash
CVE-2022-2343: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.
Key phrases: heap-based buffer overflow
CVE-2022-23431: An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
Key phrases: allows arbitrary memory, arbitrary memory write and code execution
CVE-2022-23432: An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
Key phrases: allows arbitrary memory, arbitrary memory write and code execution, improper input validation
CVE-2022-23433: Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register reminders or execute exporeted activities remotely.
Key phrases: register reminders or execute exporeted activities remotely, improper access control
CVE-2022-23434: A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.
Key phrases: execute privileged action by hijacking and modifying the, pendingintent
CVE-2022-23435: decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.
Key phrases: denial of service
CVE-2022-23437: There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.
Key phrases: infinite loop, system resources
CVE-2022-23438: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in FortiOS version 7.0.5 and prior and 6.4.9 and prior may allow an unauthenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the captive portal authentication replacement page.
Key phrases: perform a reflected cross site scripting (XSS, cross-site scripting, cwe-79, improper neutralization of input during web page generation
CVE-2022-2344: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.
Key phrases: heap-based buffer overflow
CVE-2022-23440: A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.
Key phrases: disable and uninstall the collectors from the end, hard-coded cryptographic key, hard coded cryptographic key
CVE-2022-23441: A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.
Key phrases: disguise as and forge messages from other collectors, hard-coded cryptographic key, hard coded cryptographic key
CVE-2022-23442: An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands.
Key phrases: gather the checksum information about the other VDOMs, improper access control, cwe-284
CVE-2022-23443: An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests.
Key phrases: access gateway API data via crafted HTTP GET, improper access control
CVE-2022-23446: A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission.
Key phrases: make the whole application unresponsive via changing its, improper control, root directory access permission
CVE-2022-23447: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interface  7.0.0 through 7.0.3, 4.2.0 through 4.2.4, 4.1.1 through 4.1.8, 4.0.0 through 4.0.2, 3.3.0 through 3.3.2, 3.2.1 through 3.2.3, 5.3 all versions may allow an unauthenticated and remote attacker to retrievearbitrary files from the underlying filesystem via specially crafted web requests.
Key phrases: retrievearbitrary files from the underlying filesystem via specially, path traversal
CVE-2022-23448: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.
Key phrases: achieve code execution with ADMINISTRATOR or even NT
CVE-2022-23449: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path.
Key phrases: execute code with elevated privileges by placing a, dll hijacking
CVE-2022-2345: Use After Free in GitHub repository vim/vim prior to 9.0.0046.
Key phrases: use after free
CVE-2022-23450: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the affected software, an unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted serialized object. This could allow the attacker to execute arbitrary code on the device with SYSTEM privileges.
Key phrases: execute arbitrary code, send maliciously crafted objects, execute arbitrary code on the device with SYSTEM, insecure deserialization
CVE-2022-23451: An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless of ownership. This flaw allows an attacker on the network to modify or delete protected data, causing a denial of service by consuming protected resources.
Key phrases: modify or delete protected data, authorization flaw, denial of service
CVE-2022-23452: An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an attacker on the network to consume protected resources and cause a denial of service.
Key phrases: consume protected resources and cause a denial of, authorization flaw, denial of service
CVE-2022-23453: Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
Key phrases: privilege escalation, compromise of integrity, unauthorized modification of files
CVE-2022-23454: Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
Key phrases: privilege escalation, compromise of integrity, unauthorized modification of files
CVE-2022-23455: Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
Key phrases: privilege escalation, compromise of integrity, unauthorized modification of files
CVE-2022-23456: Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software.
Key phrases: potential arbitrary file deletion
CVE-2022-23457: ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of `Validator.getValidDirectoryPath(String, String, File, boolean)` may incorrectly treat the tested input string as a child of the specified parent directory. This potentially could allow control-flow bypass checks to be defeated if an attack can specify the entire string representing the 'input' path. This vulnerability is patched in release 2.3.0.0 of ESAPI. As a workaround, it is possible to write one's own implementation of the Validator interface. However, maintainers do not recommend this.
Key phrases: bypass checks, flow bypass, be defeated if an attack can specify the, control-flow bypass checks
CVE-2022-23458: Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.
Key phrases: cross-site scripting
CVE-2022-23459: Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may point to alterable data where the pointer itself is not updated. This issue exists on the current commit of the jsonxx project. The project itself has been archived and updates are not expected. Users are advised to find a replacement.
Key phrases: memory corruption, double free, use after free
CVE-2022-2346: In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints.
CVE-2022-23460: Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized (ASAN) build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the current commit of the jsonxx project and the project itself has been archived. Updates are not expected. Users are advised to find a replacement.
Key phrases: denial of service, stack exhaustion, crash
CVE-2022-23461: Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.
Key phrases: xss
CVE-2022-23462: IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service (DOS) when it parses scientific notation numbers present in JSON. A patch for this issue is available at commit a79d31e4cff1d5a08f665574b29fd885897a28fd in the `master` branch of the repository. There are no workarounds other than applying the patch.
Key phrases: Denial of Service (DOS), for Denial of Service (DOS) when, stack buffer overflow
CVE-2022-23463: Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolvers eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact with Java classes such as java.lang.Runtime, leading to Remote Code Execution. There is no patch available for this issue at time of publication. There are no known workarounds.
Key phrases: reach and interact with Java classes such as, spel injection, remote code execution
CVE-2022-23464: Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplates getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There is no patch available for this issue at time of publication. There are no known workarounds.
Key phrases: server-side request forgery (ssrf), information disclosure
CVE-2022-23465: SwiftTerm is a Xterm/VT100 Terminal emulator. Prior to commit a94e6b24d24ce9680ad79884992e1dff8e150a31, an attacker could modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. Version a94e6b24d24ce9680ad79884992e1dff8e150a31 contains a patch for this issue. There are no known workarounds available.
Key phrases: execute arbitrary commands, malicious sequence
CVE-2022-23466: teler is an real-time intrusion detection and threat alert dashboard. teler prior to version 2.0.0-rc.4 is vulnerable to DOM-based cross-site scripting (XSS) in the teler dashboard. When teler requests messages from the event stream on the `/events` endpoint, the log data displayed on the dashboard are not sanitized. This only affects authenticated users and can only be exploited based on detected threats if the log contains a DOM scripting payload. This vulnerability has been fixed on version `v2.0.0-rc.4`. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: dom-based cross-site scripting (xss), authenticated users
CVE-2022-23467: OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the `razer_attr_read_dpi_stages`, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.
Key phrases: convince
CVE-2022-23468: xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP).xrdp < v0.9.21 contain a buffer over flow in xrdp_login_wnd_create() function. There are no known workarounds for this issue. Users are advised to upgrade.
Key phrases: buffer over flow
CVE-2022-23469: Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulnerability in Traefik displaying the Authorization header in its debug logs. In certain cases, if the log level is set to DEBUG, credentials provided using the Authorization header are displayed in the debug logs. Attackers must have access to a users logging system in order for credentials to be stolen. This issue has been addressed in version 2.9.6. Users are advised to upgrade. Users unable to upgrade may set the log level to `INFO`, `WARN`, or `ERROR`.
Key phrases: potential
CVE-2022-2347: There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
Key phrases: unchecked length field
CVE-2022-23470: Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to Gunicorn, which can be used to read any file accessible to the operating system user under which Galaxy is running. This vulnerability affects Galaxy 22.01 and higher, after the switch to gunicorn, which serve static contents directly.  Additionally, the vulnerability is mitigated when using Nginx or Apache to serve /static/* contents, instead of Galaxy's internal middleware. This issue has been patched in commit `e5e6bda4f` and will be included in future releases. Users are advised to manually patch their installations. There are no known workarounds for this vulnerability.
Key phrases: arbitrary file read
CVE-2022-23471: containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd's CRI implementation and the stream server is used for handling container IO. This bug has been fixed in containerd 1.6.12 and 1.5.16.  Users should update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers. 
Key phrases: memory leak, execute commands
CVE-2022-23472: Passeo is an open source python password generator. Versions prior to 1.0.5 rely on the python `random` library for random value selection. The python `random` library warns that it should not be used for security purposes due to its reliance on a non-cryptographically secure random number generator. As a result a motivated attacker may be able to guess generated passwords. This issue has been addressed in version 1.0.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: non-cryptographically secure random number generator