Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ice can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-482757.pdf - https://cert-portal.siemens.com/productcert/html/ssa-482757.html
CVE ID: CVE-2022-38774 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T14:26:51.356Z Vendors: Elastic Products: Elastic Endpoint Security and Elastic Endgame Security Problem Types: CWE-269 Description: An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elastic.co/community/security - https://discuss.elastic.co/t/endpoint-security-8-4-0-7-17-7-and-endgame-3-62-3-security-statement/323754
CVE ID: CVE-2022-38775 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T13:30:23.078Z Vendors: Elastic Products: Elastic Endpoint Security Problem Types: CWE-269 Description: An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elastic.co/community/security - https://discuss.elastic.co/t/endpoint-security-8-4-1-security-statement/323753
CVE ID: CVE-2022-38777 State: PUBLISHED Published: 2023-02-08T00:00:00.000Z Last Updated: 2025-03-25T14:23:08.886Z Vendors: Elastic Products: Elastic Endpoint Security Problem Types: CWE-269 Description: An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elastic.co/community/security - https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661
CVE ID: CVE-2022-38778 State: PUBLISHED Published: 2023-02-08T00:00:00.000Z Last Updated: 2025-03-25T14:20:49.608Z Vendors: Elastic Products: kibana Problem Types: CWE-20 Description: A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elastic.co/community/security - https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661
CVE ID: CVE-2022-38779 State: PUBLISHED Published: 2023-02-21T00:00:00 Last Updated: 2024-08-03T11:02:14.674Z Vendors: Elastic Products: kibana Problem Types: CWE-601 Description: An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.elastic.co/community/security - https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782
CVE ID: CVE-2022-38784 State: PUBLISHED Published: 2022-08-30T02:58:33.566936Z Last Updated: 2024-09-17T03:54:54.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jeffssh/CVE-2021-30860 - https://poppler.freedesktop.org/releases.html - https://gitlab.freedesktop.org/popple
ithub.com/jeffssh/CVE-2021-30860 - https://poppler.freedesktop.org/releases.html - https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1261/diffs?commit_id=27354e9d9696ee2bc063910a6c9a6b27c5184a52 - http://www.openwall.com/lists/oss-security/2022/09/02/11 - https://www.debian.org/security/2022/dsa-5224 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J546EJUKUOPWA3JSLP7DYNBAU3YGNCCW/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html - https://security.gentoo.org/glsa/202209-21 - ht
/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html - https://security.gentoo.org/glsa/202209-21 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGY72LBJMFAKQWC2XH4MRPIGPQLXTFL6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLKN3HJKZSGEEKOF57DM7Q3IB74HP5VW/ - https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md - https://www.cve.org/CVERecord?id=CVE-2022-38171 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5Z2677EQUWVHJLGSH5DQX53EK6MY2M2/
CVE ID: CVE-2022-38785 State: REJECTED Published: 2022-08-26T18:55:53 Last Updated: 2022-08-26T18:55:53 Description: No description available.
CVE ID: CVE-2022-38786 State: PUBLISHED Published: 2023-11-14T19:05:04.006Z Last Updated: 2024-08-30T15:18:46.738Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel Battery Life Diagnostic Tool software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00843.html
CVE ID: CVE-2022-38787 State: PUBLISHED Published: 2023-05-10T13:17:02.449Z Last Updated: 2025-01-27T18:04:04.945Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) FPGA products Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00824.html
CVE ID: CVE-2022-38788 State: PUBLISHED Published: 2022-09-15T11:58:50 Last Updated: 2024-08-03T11:02:14.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and (after offline cracking) retrieve the PIN and LTK (long-term key). Additional Analyst Notes: - CVE Program Container: References: - https://www.nokia.com/notices/responsible-disclosure/ - https://github.com/ProxyStaffy/Nokia-FastMile-5G-Receiver-5G14-B
CVE ID: CVE-2022-38789 State: PUBLISHED Published: 2022-09-15T11:56:10 Last Updated: 2024-08-03T11:02:14.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference. Additional Analyst Notes: - CVE Program Container: References: - https://airties.com/airties-information-security-policy/ - https://github.com/ProxyStaffy/Airties-CVE-2022-38789/blob/main/Description
CVE ID: CVE-2022-38790 State: PUBLISHED Published: 2022-09-01T12:55:42 Last Updated: 2024-08-03T11:02:14.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a malicious user to inject a javascript: link in the UI. When clicked by a victim user, the script will execute with the victim's permission. The exposure appears in Weave GitOps Enterprise UI via a GitopsCluster dashboard link. An annotation can be added to a GitopsCluster custom resource. Additional Analyst Notes: - CVE Program Container: References: - https://www.weave.works/product/gitops-enterprise/ - https://docs.gitops.weave.works/d
Program Container: References: - https://www.weave.works/product/gitops-enterprise/ - https://docs.gitops.weave.works/docs/intro - https://docs.gitops.weave.works/docs/cluster-management/getting-started/#profiles-and-clusters - https://docs.gitops.weave.works/security/cve/enterprise/CVE-2022-38790/index.html
CVE ID: CVE-2022-38791 State: PUBLISHED Published: 2022-08-27T00:00:00 Last Updated: 2024-08-03T11:02:14.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock. Additional Analyst Notes: - CVE Program Container: References: - https://jira.mariadb.org/browse/MDEV-28719 - https://security.netapp.com/advisory/ntap-20221104-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/p
ce%40lists.fedoraproject.org/message/ZHISY4YVO4S5QJYYIXCIAXBM7INOL4VY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCOEGSVMIEXDZHBOSV6WVF7FAVRBR2JE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVAONAZXJFGHAJ4RP2OF3EAMQCOTDSQ/
CVE ID: CVE-2022-38792 State: PUBLISHED Published: 2022-08-27T19:56:51 Last Updated: 2024-08-03T11:02:14.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/exotel/ - https://github.com/sarathsp06/exotel-py/issues/10 - https://github.com/jertel/elastalert2/pull/931 - https://inspector.pypi.io/project/exotel/0.1.6/packages/8b/ed/9ebeb34d4adb9b01151d73ccfde9c1cb2d629c3b146953c8727559a65446/exotel-0.1.6.tar.gz/exotel-0.1.6/setup.py
CVE ID: CVE-2022-38794 State: PUBLISHED Published: 2022-08-27T20:26:02 Last Updated: 2024-08-03T11:02:14.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zaver through 2020-12-15 allows directory traversal via the GET /.. substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyearn/zaver/issues/22
CVE ID: CVE-2022-38795 State: PUBLISHED Published: 2023-08-07T00:00:00 Last Updated: 2024-10-17T14:43:49.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gitea through 1.17.1, repo cloning can occur in the migration function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/go-gitea/gitea/pull/20869 - https://github.com/go-gitea/gitea/pull/20892 - https://blog.gitea.com/release-of-1.17.2/
CVE ID: CVE-2022-38796 State: PUBLISHED Published: 2022-09-14T14:18:09 Last Updated: 2024-08-03T11:02:14.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header. This can be exploited by abusing password reset emails. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=k8dp0FJnSsI
CVE ID: CVE-2022-38801 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:53:42.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zkteco.com/ - https://gist.github.com/hamoshwani/5ac860dd6757440174f446c62b24653f
CVE ID: CVE-2022-38802 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:49:01.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual log, time interval, attshift, and holiday. An authenticated administrator can read local files by exploiting XSS into a pdf generator when exporting data as a PDF Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zkteco.com/ - https://gist.github.com/hamoshwani/fd7e3d9d9ff8896f1ccf8426dccaf97e
CVE ID: CVE-2022-38803 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T19:46:02.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An authenticated employee can read local files by exploiting XSS into a pdf generator when exporting data as a PDF Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zkteco.com/ - https://gist.github.com/hamoshwani/44653bfe7b8cc461692a2f074b1ef475
CVE ID: CVE-2022-38808 State: PUBLISHED Published: 2022-09-16T13:39:22 Last Updated: 2024-08-03T11:02:14.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwebsoft/ywoa/issues/26
CVE ID: CVE-2022-38812 State: PUBLISHED Published: 2022-08-31T17:52:27 Last Updated: 2024-08-03T11:02:14.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/MegaTKC/2021/AeroCMS-v0.0.1-SQLi - https://www.nu11secur1ty.com/2022/08/aerocms-v001-sqli.html
CVE ID: CVE-2022-38813 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T18:45:32.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1iMswKzoUvindXUGh1cuAmi-0R84tLDaH/view?usp=sharing - https://phpgurukul.com/blood-donor-management-system-using-codeigniter - https://ihexcoder.wixsite.com/secresearch/post/cve-2022-38
gurukul.com/blood-donor-management-system-using-codeigniter - https://ihexcoder.wixsite.com/secresearch/post/cve-2022-38813-privilege-escalations-in-blood-donor-management-system-v1-0 - https://github.com/RashidKhanPathan/CVE-2022-38813
CVE ID: CVE-2022-38814 State: PUBLISHED Published: 2022-09-15T19:34:38 Last Updated: 2024-08-03T11:02:14.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfg_loid text field. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/168065/Fiberhome-AN5506-02-B-Cross-Site-Scripting.html
CVE ID: CVE-2022-38817 State: PUBLISHED Published: 2022-10-03T12:32:19 Last Updated: 2024-08-03T11:02:14.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dapr/dashboard - https://github.com/dapr/dashboard/issues/222
CVE ID: CVE-2022-38823 State: PUBLISHED Published: 2022-09-16T14:23:06 Last Updated: 2024-08-03T11:02:14.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/hard_code.md
CVE ID: CVE-2022-38826 State: PUBLISHED Published: 2022-09-16T14:15:56 Last Updated: 2024-08-03T11:02:14.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setStaticDhcpRules_1.md
CVE ID: CVE-2022-38827 State: PUBLISHED Published: 2022-09-16T14:09:09 Last Updated: 2024-08-03T11:02:14.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setWiFiWpsStart_2.md
CVE ID: CVE-2022-38828 State: PUBLISHED Published: 2022-09-16T14:07:28 Last Updated: 2024-08-03T11:02:14.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_T6_V3/setWiFiWpsStart_1.md
CVE ID: CVE-2022-38829 State: PUBLISHED Published: 2022-09-16T14:37:40 Last Updated: 2024-08-03T11:02:14.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/setMacFilterCfg.md
CVE ID: CVE-2022-38830 State: PUBLISHED Published: 2022-09-16T14:36:48 Last Updated: 2024-08-03T11:02:14.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/setIPv6Status.md
CVE ID: CVE-2022-38831 State: PUBLISHED Published: 2022-09-16T14:35:43 Last Updated: 2024-08-03T11:02:14.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/Tenda_RX9_Pro/SetNetControlList.md
CVE ID: CVE-2022-38832 State: PUBLISHED Published: 2022-09-16T14:56:24.000Z Last Updated: 2025-06-03T18:11:06.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/saluteSUC/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-1.md
CVE ID: CVE-2022-38833 State: PUBLISHED Published: 2022-09-16T14:55:18.000Z Last Updated: 2025-06-03T18:14:10.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/saluteSUC/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-2.md
CVE ID: CVE-2022-38840 State: PUBLISHED Published: 2023-04-16T00:00:00.000Z Last Updated: 2025-02-06T17:08:25.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upload, which leads to local file disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/drive/folders/1UG5IcL8fFp9MV0vjd78_cx6iXKda5bpM?usp=sharing - http://packetstormsecurity.com/files/171439/MAN-EAM-0003-3.2.4-XML-Injection.html
CVE ID: CVE-2022-38841 State: PUBLISHED Published: 2023-04-16T00:00:00.000Z Last Updated: 2025-02-06T16:57:46.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/drive/folders/1rAa4zzJPwMop0AEMiI2NKqUaZno7Ccqb?usp=sharing - http://packetstormsecurity.com/files/171433/Linksys-AX3200-1.1.00-Command-Injection.html
CVE ID: CVE-2022-38843 State: PUBLISHED Published: 2022-09-16T13:26:44 Last Updated: 2024-08-03T11:02:14.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-unrestricted-file-upload-7860b15d12bc
CVE ID: CVE-2022-38844 State: PUBLISHED Published: 2022-09-16T13:25:42 Last Updated: 2024-08-03T11:02:14.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exporting contacts in CSV file may end up executing the malicious system commands on his system. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-csv-injection-4c07494e2a76
CVE ID: CVE-2022-38845 State: PUBLISHED Published: 2022-09-16T13:24:36 Last Updated: 2024-08-03T11:02:14.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending crafted csv file containing malicious JavaScript to authenticated user. Any authenticated user importing the crafted CSV file may end up running the malicious JavaScripting in the browser. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-cross-site-scripting-e3e6c708df18
CVE ID: CVE-2022-38846 State: PUBLISHED Published: 2022-09-16T13:15:24 Last Updated: 2024-08-03T11:02:14.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). An attacker may capture the cookie from the insecure channel using MITM attack. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-missing-secure-flag-1664bac5ffe4