admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2022-11-25 06:00:34 +00:00
parent 6f57dadeb2
commit 6a384a526e
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
4 changed files with 67 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
2022/35xxx/CVE-2022-35501.json
View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "Stored Cross-site Scripting in Amasty Blog Pro 2.10.4 and 2.10.4 creates post functionality and lower versions."
"value": "Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function."
}
]
},

61
2022/36xxx/CVE-2022-36133.json
View File

@ -1,17 +1,66 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-36133",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2022-36133",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://download.epson-biz.com/epson/epson_public_document.php?name=Infomation_history.pdf",
"url": "https://download.epson-biz.com/epson/epson_public_document.php?name=Infomation_history.pdf"
},
{
"refsource": "MISC",
"name": "https://download.epson-biz.com/modules/colorworks/",
"url": "https://download.epson-biz.com/modules/colorworks/"
}
]
}

5
2022/39xxx/CVE-2022-39833.json
View File

@ -48,6 +48,11 @@
"refsource": "CONFIRM",
"name": "https://www.filecloud.com/supportdocs/fcdoc/latest/server/security-advisories/2022-security-advisories/advisory-2022-10-01-unauthorized-access-and-potential-remote-code-execution",
"url": "https://www.filecloud.com/supportdocs/fcdoc/latest/server/security-advisories/2022-security-advisories/advisory-2022-10-01-unauthorized-access-and-potential-remote-code-execution"
},
{
"refsource": "MISC",
"name": "https://gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c",
"url": "https://gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c"
}
]
},

7
2022/45xxx/CVE-2022-45873.json
View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file."
"value": "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file. NOTE: there is some debate about the security relevance of this report because there are zero subscribers by default."
}
]
},
@ -61,6 +61,11 @@
"url": "https://github.com/systemd/systemd/pull/25055#issuecomment-1313733553",
"refsource": "MISC",
"name": "https://github.com/systemd/systemd/pull/25055#issuecomment-1313733553"
},
{
"refsource": "MISC",
"name": "https://github.com/systemd/systemd/pull/24853#issuecomment-1326561497",
"url": "https://github.com/systemd/systemd/pull/24853#issuecomment-1326561497"
}
]
}