alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-29959 (published 2022-08-16)
Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users are stored insecurely in the SecUsers.ini file by using a simple string transformation rather than a cryptographic mechanism.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: emerson
Affected products: openbsi
CVE-2022-2996 (published 2022-09-01)
A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-295
Affected vendors: debian, python-scciclient_project
Affected products: debian_linux, python-scciclient
CVE-2022-29960 (published 2022-07-26)
Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. DES with hardcoded cryptographic keys is used for protection of certain system credentials, engineering files, and sensitive utilities.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: emerson
Affected products: openbsi
CVE-2022-29962 (published 2022-07-26)
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: emerson
Affected products: deltav_distributed_control_system_sq_controller, deltav_distributed_control_system_sq_controller_firmware, deltav_distributed_control_system_sx_controller, deltav_distributed_control_system_sx_controller_firmware, se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block, se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block_firmware, se4003s2b4_16-pin_mass_i\/o_terminal_block, se4003s2b4_16-pin_mass_i\/o_terminal_block_firmware, se4003s2b524-pin_mass_i\/o_terminal_block, se4003s2b524-pin_mass_i\/o_terminal_block_firmware, se4017p0_h1_i\/o_interface_card_and_terminl_block, se4017p0_h1_i\/o_interface_card_and_terminl_block_firmware, se4017p1_h1_i\/o_card_with_integrated_power, se4017p1_h1_i\/o_card_with_integrated_power_firmware, se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock, se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock_firmware, se4026_virtual_i\/o_module_2, se4026_virtual_i\/o_module_2_firmware, se4027_virtual_i\/o_module_2, se4027_virtual_i\/o_module_2_firmware, se4032s1t2b8_high_side_40-pin_do_mass_i\/o_terminal_block, se4032s1t2b8_high_side_40-pin_do_mass_i\/o_terminal_block_firmware, se4037p0_h1_i\/o_interface_card_and_terminl_block, se4037p0_h1_i\/o_interface_card_and_terminl_block_firmware, se4037p1_redundant_h1_i\/o_card_with_integrated_power_and_terminal_block
CVE-2022-29963 (published 2022-07-26)
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: emerson
Affected products: deltav_distributed_control_system_sq_controller, deltav_distributed_control_system_sq_controller_firmware, deltav_distributed_control_system_sx_controller, deltav_distributed_control_system_sx_controller_firmware, se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block, se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block_firmware, se4003s2b4_16-pin_mass_i\/o_terminal_block, se4003s2b4_16-pin_mass_i\/o_terminal_block_firmware, se4003s2b524-pin_mass_i\/o_terminal_block, se4003s2b524-pin_mass_i\/o_terminal_block_firmware, se4017p0_h1_i\/o_interface_card_and_terminl_block, se4017p0_h1_i\/o_interface_card_and_terminl_block_firmware, se4017p1_h1_i\/o_card_with_integrated_power, se4017p1_h1_i\/o_card_with_integrated_power_firmware, se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock, se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock_firmware, se4026_virtual_i\/o_module_2, se4026_virtual_i\/o_module_2_firmware, se4027_virtual_i\/o_module_2, se4027_virtual_i\/o_module_2_firmware, se4032s1t2b8_high_side_40-pin_do_mass_i\/o_terminal_block, se4032s1t2b8_high_side_40-pin_do_mass_i\/o_terminal_block_firmware, se4037p0_h1_i\/o_interface_card_and_terminl_block, se4037p0_h1_i\/o_interface_card_and_terminl_block_firmware, se4037p1_redundant_h1_i\/o_card_with_integrated_power_and_terminal_block
CVE-2022-29964 (published 2022-07-26)
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC SSH provides access to a shell as root, DeltaV, or backup via hardcoded credentials. NOTE: this is different from CVE-2014-2350.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: emerson
Affected products: deltav_distributed_control_system_sq_controller, deltav_distributed_control_system_sq_controller_firmware, deltav_distributed_control_system_sx_controller, deltav_distributed_control_system_sx_controller_firmware, se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block, se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block_firmware, se4003s2b4_16-pin_mass_i\/o_terminal_block, se4003s2b4_16-pin_mass_i\/o_terminal_block_firmware, se4003s2b524-pin_mass_i\/o_terminal_block, se4003s2b524-pin_mass_i\/o_terminal_block_firmware, se4017p0_h1_i\/o_interface_card_and_terminl_block, se4017p0_h1_i\/o_interface_card_and_terminl_block_firmware, se4017p1_h1_i\/o_card_with_integrated_power, se4017p1_h1_i\/o_card_with_integrated_power_firmware, se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock, se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock_firmware, se4026_virtual_i\/o_module_2, se4026_virtual_i\/o_module_2_firmware, se4027_virtual_i\/o_module_2, se4027_virtual_i\/o_module_2_firmware, se4032s1t2b8_high_side_40-pin_do_mass_i\/o_terminal_block, se4032s1t2b8_high_side_40-pin_do_mass_i\/o_terminal_block_firmware, se4037p0_h1_i\/o_interface_card_and_terminl_block, se4037p0_h1_i\/o_interface_card_and_terminl_block_firmware, se4037p1_redundant_h1_i\/o_card_with_integrated_power_and_terminal_block
CVE-2022-29965 (published 2022-07-26)
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on M-series and SIS (CSLS/LSNB/LSNG) nodes is controlled by means of utility passwords. These passwords are generated using a deterministic, insecure algorithm using a single seed value composed of a day/hour/minute timestamp with less than 16 bits of entropy. The seed value is fed through a lookup table and a series of permutation operations resulting in three different four-character passwords corresponding to different privilege levels. An attacker can easily reconstruct these passwords and thus gain access to privileged maintenance operations. NOTE: this is different from CVE-2014-2350.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-327
Affected vendors: emerson
Affected products: deltav_distributed_control_system, deltav_distributed_control_system_sq_controller, deltav_distributed_control_system_sq_controller_firmware, deltav_distributed_control_system_sx_controller, deltav_distributed_control_system_sx_controller_firmware, se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block, se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block_firmware, se4003s2b4_16-pin_mass_i\/o_terminal_block, se4003s2b4_16-pin_mass_i\/o_terminal_block_firmware, se4003s2b524-pin_mass_i\/o_terminal_block, se4003s2b524-pin_mass_i\/o_terminal_block_firmware, se4017p0_h1_i\/o_interface_card_and_terminl_block, se4017p0_h1_i\/o_interface_card_and_terminl_block_firmware, se4017p1_h1_i\/o_card_with_integrated_power, se4017p1_h1_i\/o_card_with_integrated_power_firmware, se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock, se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock_firmware, se4026_virtual_i\/o_module_2, se4026_virtual_i\/o_module_2_firmware, se4027_virtual_i\/o_module_2, se4027_virtual_i\/o_module_2_firmware, se4032s1t2b8_high_side_40-pin_do_mass_i\/o_terminal_block, se4032s1t2b8_high_side_40-pin_do_mass_i\/o_terminal_block_firmware, se4037p0_h1_i\/o_interface_card_and_terminl_block, se4037p0_h1_i\/o_interface_card_and_terminl_block_firmware
CVE-2022-29967 (published 2022-04-29)
static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: glewlwyd_project
Affected products: glewlwyd
CVE-2022-29968 (published 2022-05-02)
An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-909
Affected vendors: fedoraproject, linux, netapp
Affected products: fedora, h300s, h300s_firmware, h410c, h410c_firmware, h410s, h410s_firmware, h500s, h500s_firmware, h700s, h700s_firmware, linux_kernel, solidfire_\&_hci_management_node
CVE-2022-29969 (published 2022-05-02)
The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: mediawiki
Affected products: rss_for_mediawiki
CVE-2022-2997 (published 2022-08-25)
Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-384
Affected vendors: snipeitapp
Affected products: snipe-it
CVE-2022-29970 (published 2022-05-02)
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: debian, sinatrarb
Affected products: debian_linux, sinatra
CVE-2022-29971 (published 2022-05-09)
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-88
Affected vendors: insightsoftware
Affected products: magnitude_simba_amazon_athena_odbc_driver
CVE-2022-29972 (published 2022-05-09)
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-88
Affected vendors: insightsoftware
Affected products: magnitude_simba_amazon_redshift_odbc_driver
CVE-2022-29973 (published 2022-05-02)
relan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in the filesystem) in certain situations involving offsets beyond ValidDataLength.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-770
Affected vendors: exfat_project
Affected products: exfat
CVE-2022-29974 (published 2024-12-09)
AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow. This driver is, for example, used in certain ASUS devices.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-120
CVE-2022-29975 (published 2022-05-11)
An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: altn
Affected products: mdaemon
CVE-2022-29976 (published 2022-05-11)
An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: altn
Affected products: mdaemon
CVE-2022-29977 (published 2022-05-11)
There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: saitoha
Affected products: libsixel
CVE-2022-29978 (published 2022-05-11)
There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-682
Affected vendors: saitoha
Affected products: libsixel
CVE-2022-29979 (published 2022-05-12)
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: simple_client_management_system_project
Affected products: simple_client_management_system
CVE-2022-2998 (published 2022-09-26)
Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted HTML page.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: google
Affected products: chrome
CVE-2022-29980 (published 2022-05-12)
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: simple_client_management_system_project
Affected products: simple_client_management_system
CVE-2022-29981 (published 2022-05-12)
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: simple_client_management_system_project
Affected products: simple_client_management_system
CVE-2022-29982 (published 2022-05-12)
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: simple_client_management_system_project
Affected products: simple_client_management_system
CVE-2022-29983 (published 2022-05-12)
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: simple_client_management_system_project
Affected products: simple_client_management_system
CVE-2022-29984 (published 2022-05-12)
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: simple_client_management_system_project
Affected products: simple_client_management_system
CVE-2022-29985 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29986 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29987 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29988 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29989 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29990 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29992 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29993 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29994 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29995 (published 2022-05-12)
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_sports_complex_booking_system_project
Affected products: online_sports_complex_booking_system
CVE-2022-29998 (published 2022-05-12)
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: angeljudesuarez
Affected products: insurance_management_system
CVE-2022-29999 (published 2022-05-12)
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?client_id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: angeljudesuarez
Affected products: insurance_management_system
CVE-2022-3000 (published 2022-09-20)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: yetiforce
Affected products: yetiforce_customer_relationship_management
CVE-2022-30000 (published 2022-05-12)
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?recipt_no=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: angeljudesuarez
Affected products: insurance_management_system
CVE-2022-30001 (published 2022-05-12)
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agent_id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: angeljudesuarez
Affected products: insurance_management_system
CVE-2022-30002 (published 2022-05-12)
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: angeljudesuarez
Affected products: insurance_management_system
CVE-2022-30003 (published 2022-09-26)
Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: online_market_place_site_project
Affected products: online_market_place_site
CVE-2022-30004 (published 2022-09-26)
Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection..
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_market_place_site_project
Affected products: online_market_place_site
CVE-2022-30007 (published 2022-05-17)
GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: gxcms_project
Affected products: gxcms
CVE-2022-3001 (published 2022-09-15)
This vulnerability exists in Milesight Video Management Systems (VMS), all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted network camera. Successful exploitation of this vulnerability could allow the attacker to cause a Denial of Service condition on the targeted device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: milesight
Affected products: video_management_systems, video_management_systems_firmware
CVE-2022-30011 (published 2022-05-16)
In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: hospital_management_system_project
Affected products: hospital_management_system
CVE-2022-30012 (published 2022-05-16)
In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: hospital_management_system_project
Affected products: hospital_management_system
CVE-2022-30013 (published 2022-05-16)
A stored cross-site scripting (XSS) vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: totaljs
Affected products: total.js
CVE-2022-30014 (published 2022-05-23)
Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: simple_food_website_project
Affected products: simple_food_website
CVE-2022-30015 (published 2022-05-23)
In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/all_users.php like Full Username, etc .This causes stored xss.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: simple_food_website_project
Affected products: simple_food_website
CVE-2022-30016 (published 2022-05-23)
Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: rescue_dispatch_management_system_project
Affected products: rescue_dispatch_management_system
CVE-2022-30017 (published 2022-05-23)
Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: rescue_dispatch_management_system_project
Affected products: rescue_dispatch_management_system
CVE-2022-30018 (published 2022-05-19)
Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access to recordings/recording locations.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-522
Affected vendors: mobotix
Affected products: mxcontrolcenter
CVE-2022-3002 (published 2022-10-06)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: yetiforce
Affected products: yetiforce_customer_relationship_management
CVE-2022-30023 (published 2022-06-16)
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: tenda
Affected products: hg9, hg9_firmware
CVE-2022-30024 (published 2022-07-14)
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: tp-link
Affected products: tl-wr841, tl-wr841_firmware, tl-wr841n, tl-wr841n\(eu\), tl-wr841n\(eu\)_firmware, tl-wr841n_firmware
CVE-2022-30025 (published 2023-05-24)
SQL injection in "/Framewrk/Home.jsp" file (POST method) in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: credenceanalytics
Affected products: ideal_-_wealth_and_funds
CVE-2022-30028 (published 2022-06-24)
Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-362
Affected vendors: dradisframework
Affected products: dradis
CVE-2022-30033 (published 2022-05-18)
Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: tenda
Affected products: tx9_pro, tx9_pro_firmware
CVE-2022-30034 (published 2022-06-02)
Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Weakness: CWE-287
Affected vendors: flower_project
Affected products: flower
CVE-2022-30036 (published 2022-08-21)
MA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product was designed for isolated networks. Also, the successor product, grandMA3, is not affected by this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: malighting
Affected products: grandma2_light, grandma2_light_firmware
CVE-2022-30037 (published 2023-03-23)
XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-829
Affected vendors: xunruicms
Affected products: xunruicms
CVE-2022-3004 (published 2022-09-20)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: yetiforce
Affected products: yetiforce_customer_relationship_management
CVE-2022-30040 (published 2022-05-11)
Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: tenda
Affected products: ax1803, ax1803_firmware
CVE-2022-30045 (published 2022-05-17)
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap out-of-bounds read.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: ezxml_project
Affected products: ezxml
CVE-2022-30047 (published 2022-05-11)
Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: mingsoft
Affected products: mcms
CVE-2022-30048 (published 2022-05-11)
Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: mingsoft
Affected products: mcms
CVE-2022-30049 (published 2022-05-15)
A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-918
Affected vendors: ruifang-tech
Affected products: rebuild
CVE-2022-3005 (published 2022-09-20)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: yetiforce
Affected products: yetiforce_customer_relationship_management
CVE-2022-30050 (published 2022-05-16)
Gnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting (XSS) via bbs/member_confirm.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: sir
Affected products: gnuboard
CVE-2022-30052 (published 2022-05-17)
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: home_clean_service_system_project
Affected products: home_clean_service_system
CVE-2022-30053 (published 2022-05-17)
In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: oretnom23
Affected products: toll_tax_management_system
CVE-2022-30054 (published 2022-05-17)
In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: covid_19_travel_pass_management_project
Affected products: covid_19_travel_pass_management
CVE-2022-30055 (published 2022-05-16)
Prime95 30.7 build 9 suffers from a Buffer Overflow vulnerability that could lead to Remote Code Execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: mersenne, microsoft
Affected products: prime95, windows
CVE-2022-30057 (published 2022-05-11)
Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: shopwind
Affected products: shopwind
CVE-2022-30058 (published 2022-05-11)
Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-22
Affected vendors: shopwind
Affected products: shopwind
CVE-2022-30059 (published 2022-05-11)
Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-22
Affected vendors: shopwind
Affected products: shopwind
CVE-2022-30060 (published 2022-05-11)
ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: ftcms
Affected products: ftcms
CVE-2022-30061 (published 2022-05-11)
ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: ftcms
Affected products: ftcms
CVE-2022-30062 (published 2022-05-11)
ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: ftcms
Affected products: ftcms
CVE-2022-30063 (published 2022-05-11)
ftcms <=2.1 was discovered to be vulnerable to code execution attacks .
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: ftcms
Affected products: ftcms
CVE-2022-30065 (published 2022-05-18)
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: busybox, siemens
Affected products: busybox, scalance_sc622-2c, scalance_sc622-2c_firmware, scalance_sc626-2c, scalance_sc626-2c_firmware, scalance_sc632-2c, scalance_sc632-2c_firmware, scalance_sc636-2c, scalance_sc636-2c_firmware, scalance_sc642-2c, scalance_sc642-2c_firmware, scalance_sc646-2c, scalance_sc646-2c_firmware
CVE-2022-30067 (published 2022-05-17)
GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: gimp
Affected products: gimp
CVE-2022-3007 (published 2023-10-31)
The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update (DFU) which is used for performing Over-The-Air (OTA) firmware updates on the Bluetooth Low Energy (BLE) devices. An unauthenticated attacker could exploit this vulnerability by setting arbitrary values to handle on the vulnerable device over Bluetooth.

Successful exploitation of this vulnerability could allow the attacker to perform firmware update, device reboot or data manipulation on the target device.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-862
Affected vendors: syska
Affected products: sw100_smartwatch, sw100_smartwatch_firmware
CVE-2022-30072 (published 2022-05-17)
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: wbce
Affected products: wbce_cms
CVE-2022-30073 (published 2022-05-17)
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: wbce
Affected products: wbce_cms
CVE-2022-30075 (published 2022-06-09)
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: tp-link
Affected products: archer_ax50, archer_ax50_firmware
CVE-2022-30076 (published 2023-04-16)
ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-307
Affected vendors: entab
Affected products: erp
CVE-2022-30078 (published 2022-09-07)
NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameters.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: netgear
Affected products: r6200, r6200_firmware, r6300, r6300_firmware
CVE-2022-30079 (published 2022-09-08)
Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: netgear
Affected products: r6200
CVE-2022-3008 (published 2022-09-05)
The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input that would result in a path expansion. We recommend upgrading to 2.6.0 or past commit 52ff00a38447f06a17eab1caa2cf0730a119c751
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: debian, tinygltf_project
Affected products: debian_linux, tinygltf
CVE-2022-30083 (published 2022-07-30)
EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code (remote).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: elliegrid
Affected products: elliegrid
CVE-2022-3010 (published 2024-01-02)
The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-1391
Affected vendors: priva
Affected products: top_control_suite
CVE-2022-30105 (published 2022-05-18)
In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the [form name] form; [list vulnerable parameters], are not properly sanitized after being submitted to the web interface in a POST request. With specially crafted parameters, it is possible to inject a an OS command which will be executed with root privileges, as the web interface, and all processes on the device, run as root.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: belkin
Affected products: n300, n300_firmware
CVE-2022-30110 (published 2022-05-17)
The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users' browser.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: jirafeau
Affected products: jirafeau
CVE-2022-30111 (published 2022-05-18)
Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-327
Affected vendors: mck_smartlock_project
Affected products: mck_smartlock
CVE-2022-30113 (published 2022-07-14)
Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: fahou100
Affected products: electronic_mall_system
CVE-2022-30114 (published 2023-05-19)
A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: fastweb
Affected products: fastgate_gpon_fga2130fwb, fastgate_gpon_fga2130fwb_firmware, fastgate_vdsl2_dga4131fwb, fastgate_vdsl2_dga4131fwb_firmware
CVE-2022-30115 (published 2022-06-02)
Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-325
Affected vendors: haxx, netapp, splunk
Affected products: clustered_data_ontap, curl, h300s, h300s_firmware, h410s, h410s_firmware, h500s, h500s_firmware, h700s, h700s_firmware, hci_bootstrap_os, hci_compute_node, solidfire\,_enterprise_sds_\&_hci_storage_node, solidfire_\&_hci_management_node, universal_forwarder
CVE-2022-30117 (published 2022-06-24)
Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure Concrete doesn’t allow traversal and by changing isFullChunkFilePresent to have an early false return when input doesn't match expectations.Concrete CMS Security team ranked this 5.8 with CVSS v3.1 vector AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. Credit to Siebene for reporting.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-22
Affected vendors: concretecms
Affected products: concrete_cms
CVE-2022-30118 (published 2022-06-24)
Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for reporting.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: concretecms
Affected products: concrete_cms
CVE-2022-30119 (published 2022-06-24)
XSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for reporting.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: concretecms
Affected products: concrete_cms
CVE-2022-3012 (published 2022-08-27)
A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207422 is the identifier assigned to this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: fast_food_ordering_system_project
Affected products: fast_food_ordering_system