alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-28496 (published 2023-03-23)
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: totolink
Affected products: cp900, cp900_firmware
CVE-2022-28497 (published 2023-03-23)
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: totolink
Affected products: cp900, cp900_firmware
CVE-2022-2850 (published 2022-10-14)
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: debian, fedoraproject, port389, redhat
Affected products: 389-ds-base, debian_linux, directory_server, enterprise_linux, fedora
CVE-2022-28505 (published 2022-05-03)
Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: jflyfox
Affected products: jfinal_cms
CVE-2022-28506 (published 2022-04-25)
There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-787
Affected vendors: fedoraproject, giflib_project
Affected products: fedora, giflib
CVE-2022-28507 (published 2022-05-06)
Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting (XSS) via Dragon path router admin page.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: bdt-121_project
Affected products: bdt-121, bdt-121_firmware
CVE-2022-28508 (published 2022-05-04)
An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: mantisbt
Affected products: mantisbt
CVE-2022-28512 (published 2022-05-04)
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: fantastic_blog_project
Affected products: fantastic_blog
CVE-2022-2852 (published 2022-09-26)
Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: fedoraproject, google
Affected products: chrome, fedora
CVE-2022-28521 (published 2022-04-26)
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: zcms_project
Affected products: zcms
CVE-2022-28522 (published 2022-04-26)
ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: zcms_project
Affected products: zcms
CVE-2022-28523 (published 2022-04-26)
HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-22
Affected vendors: hongcms_project
Affected products: hongcms
CVE-2022-28524 (published 2022-04-26)
ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: ed01-cms_project
Affected products: ed01-cms
CVE-2022-28525 (published 2022-04-26)
ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_user&id=1.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: ed01-cms_project
Affected products: ed01-cms
CVE-2022-28527 (published 2022-04-26)
dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-22
Affected vendors: dhcms_project
Affected products: dhcms
CVE-2022-28528 (published 2022-04-26)
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: bloofox
Affected products: bloofoxcms
CVE-2022-2853 (published 2022-09-26)
Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: fedoraproject, google
Affected products: android, chrome, fedora
CVE-2022-28530 (published 2022-05-05)
Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: covid-19_directory_on_vaccination_system_project
Affected products: covid-19_directory_on_vaccination_system
CVE-2022-28531 (published 2022-05-20)
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Username) field.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: covid-19_directory_on_vaccination_system_project
Affected products: covid-19_directory_on_vaccination_system
CVE-2022-28533 (published 2022-05-05)
Sourcecodester Medical Hub Directory Site 1.0 is vulnerable to SQL Injection via /mhds/clinic/view_details.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: medical_hub_directory_site_project
Affected products: medical_hub_directory_site
CVE-2022-2854 (published 2022-09-26)
Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: fedoraproject, google
Affected products: chrome, fedora
CVE-2022-28541 (published 2022-04-11)
Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: samsung
Affected products: update
CVE-2022-28542 (published 2022-04-11)
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-284
Affected vendors: samsung
Affected products: galaxy_store
CVE-2022-28543 (published 2022-04-11)
Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: samsung
Affected products: samsung_flow
CVE-2022-28544 (published 2022-04-11)
Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: samsung
Affected products: galaxy_store
CVE-2022-28545 (published 2022-05-06)
FUDforum 3.1.1 is vulnerable to Stored XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: fudforum
Affected products: fudforum
CVE-2022-2855 (published 2022-09-26)
Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: fedoraproject, google
Affected products: chrome, fedora
CVE-2022-28550 (published 2023-06-13)
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: jhead_project
Affected products: jhead
CVE-2022-28552 (published 2022-05-04)
Cscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a new song, delete it to the recycle bin, and SQL injection security problems will occur when emptying the recycle bin.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: chshcms
Affected products: cscms
CVE-2022-28556 (published 2022-05-04)
Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow. Similarly, this vulnerability can be used together with CVE-2021-44971
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: tenda
Affected products: ac15, ac15_firmware
CVE-2022-28557 (published 2022-05-04)
There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: tenda
Affected products: ac15, ac15_firmware
CVE-2022-2856 (published 2022-09-26)
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: apple, fedoraproject, google, linux, microsoft
Affected products: android, chrome, fedora, linux_kernel, macos, windows
Added to CISA KEV catalog: 2022-08-18
KEV required action: Apply updates per vendor instructions.
CVE-2022-28560 (published 2022-05-03)
There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attacker can obtain a stable shell through a carefully constructed payload
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: tenda
Affected products: ac9, ac9_firmware
CVE-2022-28561 (published 2022-05-03)
There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router. An attacker can obtain a stable shell through a carefully constructed payload
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: tenda
Affected products: ax12, ax12_firmware
CVE-2022-28568 (published 2022-05-04)
Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: simple_doctor\'s_appointment_system_project
Affected products: simple_doctor\'s_appointment_system
CVE-2022-2857 (published 2022-09-26)
Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: fedoraproject, google
Affected products: chrome, fedora
CVE-2022-28571 (published 2022-05-02)
D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dlink
Affected products: dir-882, dir-882_firmware
CVE-2022-28572 (published 2022-05-02)
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: tenda
Affected products: ax1803, ax1803_firmware, ax1806, ax1806_firmware
CVE-2022-28573 (published 2022-05-02)
D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the system_time_timezone parameter.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dlink
Affected products: dir-823_pro, dir-823_pro_firmware
CVE-2022-28575 (published 2022-05-05)
It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows attackers to execute arbitrary commands through a carefully constructed payload
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-28577 (published 2022-05-05)
It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-28578 (published 2022-05-05)
It is found that there is a command injection vulnerability in the setOpenVpnCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-28579 (published 2022-05-05)
It is found that there is a command injection vulnerability in the setParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-2858 (published 2022-09-26)
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: fedoraproject, google
Affected products: chrome, fedora
CVE-2022-28580 (published 2022-05-05)
It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-28581 (published 2022-05-05)
It is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-28582 (published 2022-05-05)
It is found that there is a command injection vulnerability in the setWiFiSignalCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-28583 (published 2022-05-05)
It is found that there is a command injection vulnerability in the setWiFiWpsCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-28584 (published 2022-05-05)
It is found that there is a command injection vulnerability in the setWiFiWpsStart interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) router, which allows an attacker to execute arbitrary commands through a carefully constructed payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: totolink
Affected products: a7100ru, a7100ru_firmware
CVE-2022-28585 (published 2022-05-03)
EmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: phome
Affected products: empirecms
CVE-2022-28586 (published 2022-04-25)
XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hoosk
Affected products: hoosk
CVE-2022-28588 (published 2022-05-03)
In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters, resulting in stored XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: springbootmovie_project
Affected products: springbootmovie
CVE-2022-28589 (published 2022-05-03)
A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title field in admin/pages.php?action=add_new
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: pixelimity
Affected products: pixelimity
CVE-2022-2859 (published 2022-09-26)
Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: fedoraproject, google
Affected products: chrome, fedora
CVE-2022-28590 (published 2022-05-03)
A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: pixelimity
Affected products: pixelimity
CVE-2022-28598 (published 2022-08-22)
Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: frappe
Affected products: erpnext
CVE-2022-28599 (published 2022-05-03)
A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: thedaylightstudio
Affected products: fuel_cms
CVE-2022-2860 (published 2022-09-26)
Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafted HTML page.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Affected vendors: fedoraproject, google
Affected products: chrome, fedora
CVE-2022-28601 (published 2022-05-10)
A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-863
Affected vendors: lmsdoctor
Affected products: 2_factor_authentication
CVE-2022-28605 (published 2022-06-02)
Hardcoded admin token in SoundBar apps in Linkplay SDK 1.00 allows remote attackers to gain admin privilege access in linkplay antifactory
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: apple, google, linkplay
Affected products: android, iphone_os, sound_bar
CVE-2022-28606 (published 2022-05-05)
An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: bosscms
Affected products: bosscms
CVE-2022-28607 (published 2022-12-01)
An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/mod_users/controller.php.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: isic.lk_project
Affected products: isic.lk
CVE-2022-2861 (published 2022-09-26)
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML page.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-79
Affected vendors: fedoraproject, google
Affected products: chrome, fedora
CVE-2022-28611 (published 2022-11-11)
Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: xmm_7560, xmm_7560_firmware
CVE-2022-28612 (published 2022-06-15)
Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Muneeb's Custom Popup Builder plugin <= 1.3.1 at WordPress.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: custom_popup_builder_project
Affected products: custom_popup_builder
CVE-2022-28613 (published 2022-05-02)
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The vulnerability is caused by the validation error in the length information carried in MBAP header in the HCI Modbus TCP function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-1284
Affected vendors: abb, hitachienergy
Affected products: rtu500, rtu500_firmware
CVE-2022-28614 (published 2022-06-09)
The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Modules compiled and distributed separately from Apache HTTP Server that use the 'ap_rputs' function and may pass it a very large (INT_MAX or larger) string must be compiled against current headers to resolve the issue.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-190
Affected vendors: apache, fedoraproject, netapp
Affected products: clustered_data_ontap, fedora, http_server
CVE-2022-28615 (published 2022-06-09)
Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-190
Affected vendors: apache, fedoraproject, netapp
Affected products: clustered_data_ontap, fedora, http_server
CVE-2022-28616 (published 2022-05-17)
A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-918
Affected vendors: hp
Affected products: oneview
CVE-2022-28617 (published 2022-05-17)
A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hp
Affected products: oneview
CVE-2022-28618 (published 2022-05-20)
A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays that could allow an attacker to execute arbitrary commands on a Nimble appliance. HPE has made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or later, 5.2.1.0 or later, 6.0.0.100 or later.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: hpe
Affected products: nimble_storage_all_flash_arrays, nimble_storage_hybrid_flash_arrays, nimble_storage_secondary_flash_arrays, nimbleos
CVE-2022-28619 (published 2022-06-24)
A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager installer 7.6.14.0.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: control_repository_manager
CVE-2022-2862 (published 2022-08-17)
Use After Free in GitHub repository vim/vim prior to 9.0.0221.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: fedoraproject, vim
Affected products: fedora, vim
CVE-2022-28620 (published 2022-06-24)
A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers versions: Prior to node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware associated with HPE Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27; All Slingshot versions prior to 1.7.2; All versions of node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware associated with HPE Cray EX liquid cooled cabinets prior to 1.6.27/1.5.33/1.4.27. HPE has provided a software update to resolve this vulnerability in HPE Cray Legacy Shasta System Solutions, HPE Slingshot, and HPE Cray EX Supercomputers.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: cray_ex_supercomputers, cray_ex_supercomputers_firmware, cray_sh_supercomputer_air_cooled_base_system_code, cray_sh_supercomputer_air_cooled_base_system_code_firmware, cray_sh_supercomputer_liquid_cooled_base_system_code, cray_sh_supercomputer_liquid_cooled_base_system_code_firmware, cray_sh_supercomputer_liquid_cooled_tds_base_system_code, cray_sh_supercomputer_liquid_cooled_tds_base_system_code_firmware, slingshot, slingshot_firmware
CVE-2022-28621 (published 2022-06-28)
A remote disclosure of sensitive information vulnerability was discovered in HPE NonStop DSM/SCM version: T6031H03^ADP. HPE has provided a software update to resolve this vulnerability in HPE NonStop DSM/SCM.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: hpe
Affected products: nonstop_distributed_systems_management_\/_software_configuration_manager
CVE-2022-28622 (published 2022-06-27)
A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: hpe
Affected products: storeonce_3640, storeonce_3640_firmware
CVE-2022-28623 (published 2022-07-08)
Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SSO version 10.0 certd library Patch 9 for HP-UX.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: hp, hpe, redhat
Affected products: enterprise_linux, hp-ux, icewall_sso_certd
CVE-2022-28624 (published 2022-07-08)
A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vulnerability could be remotely exploited to allow cross site scripting (XSS). HPE has made the following software updates to resolve the vulnerability. HPE FlexNetwork 5130EL_7.10.R3507P02 and HPE FlexFabric 5945_7.10.R6635.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: hpe
Affected products: flexfabric_5945, flexfabric_5945_firmware, flexnetwork_5130_ei, flexnetwork_5130_ei_firmware
CVE-2022-28625 (published 2022-08-31)
A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: hp
Affected products: oneview
CVE-2022-28626 (published 2022-08-12)
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-28627 (published 2022-08-12)
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-28628 (published 2022-08-12)
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-28629 (published 2022-08-12)
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A low privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-2863 (published 2022-09-16)
The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: wpvivid
Affected products: migration\,_backup\,_staging
CVE-2022-28630 (published 2022-08-12)
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality and integrity, and a partial loss of availability. User interaction is required to exploit this vulnerability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-28631 (published 2022-08-12)
A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-28632 (published 2022-08-12)
A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-28633 (published 2022-08-12)
A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file system resulting in a complete loss of confidentiality and a partial loss of integrity and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-28634 (published 2022-08-12)
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server
CVE-2022-28635 (published 2022-08-12)
A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to potentially execute arbitrary code in an isolated process resulting in a complete loss of confidentiality, integrity, and availability within that process. In addition, an unprivileged user could exploit a denial of service (DoS) vulnerability in an isolated process resulting in a complete loss of availability within that process. A successful attack depends on conditions beyond the attackers control. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: hpe
Affected products: apollo_2000_gen10_plus_system, apollo_4200_gen10_server, apollo_4510_gen10_system, apollo_6500_gen10_plus_system, apollo_6500_gen10_system, apollo_n2600_gen10_plus, apollo_n2800_gen10_plus, apollo_r2600_gen10, apollo_r2800_gen10, edgeline_e920_server_blade, edgeline_e920d_server_blade, edgeline_e920t_server_blade, integrated_lights-out_5_firmware, proliant_bl460c_gen10_server_blade, proliant_dl110_gen10_plus_telco_server, proliant_dl120_gen10_server, proliant_dl160_gen10_server, proliant_dl180_gen10_server, proliant_dl20_gen10_plus_server, proliant_dl20_gen10_server, proliant_dl325_gen10_plus_server, proliant_dl325_gen10_plus_v2_server, proliant_dl325_gen10_server, proliant_dl345_gen10_plus_server, proliant_dl360_gen10_plus_server