alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-31710 (published 2023-01-26)
vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-502
Affected vendors: vmware
Affected products: vrealize_log_insight
CVE-2022-31711 (published 2023-01-26)
VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: vmware
Affected products: vrealize_log_insight
CVE-2022-3172 (published 2023-11-03)
A security issue was discovered in kube-apiserver that allows an 
aggregated API server to redirect client traffic to any URL.  This could
 lead to the client performing unexpected actions as well as forwarding 
the client's API server credentials to third parties.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)
Weakness: CWE-918
Affected vendors: kubernetes
Affected products: apiserver
CVE-2022-3173 (published 2022-09-17)
Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-287
Affected vendors: snipeitapp
Affected products: snipe-it
CVE-2022-31733 (published 2023-02-03)
Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via another port on diego cells, allowing application ingress without a client certificate. If mTLS route integrity is enabled AND unproxied ports are turned off, then an attacker could connect to an application that should be only reachable via mTLS, without presenting a client certificate.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-295
Affected vendors: cloudfoundry
Affected products: cf-deployment, diego
CVE-2022-31734 (published 2022-06-20)
Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.2(50)SY released in 2011, and Cisco Catalyst 2940 Series Switches have been retired since January 2015
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: cisco
Affected products: ws-c2940-8tf-s, ws-c2940-8tf-s_firmware, ws-c2940-8tt-s, ws-c2940-8tt-s_firmware
CVE-2022-31735 (published 2022-09-15)
OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: osstech
Affected products: openam
CVE-2022-31736 (published 2022-12-22)
A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-942
Affected vendors: mozilla
Affected products: firefox, firefox_esr, thunderbird
CVE-2022-31737 (published 2022-12-22)
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: mozilla
Affected products: firefox, firefox_esr, thunderbird
CVE-2022-31738 (published 2022-12-22)
When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-290
Affected vendors: mozilla
Affected products: firefox, firefox_esr, thunderbird
CVE-2022-31739 (published 2022-12-22)
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-73
Affected vendors: microsoft, mozilla
Affected products: firefox, firefox_esr, thunderbird, windows
CVE-2022-3174 (published 2022-09-13)
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-614
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-31740 (published 2022-12-22)
On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: mozilla
Affected products: firefox, firefox_esr, thunderbird
CVE-2022-31741 (published 2022-12-22)
A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-908
Affected vendors: mozilla
Affected products: firefox, firefox_esr, thunderbird
CVE-2022-31742 (published 2022-12-22)
An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between invalid key handles and cross-origin key handles. This could have led to cross-origin account linking in violation of WebAuthn goals. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: mozilla
Affected products: firefox, firefox_esr, thunderbird
CVE-2022-31743 (published 2022-12-22)
Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been used to escape HTML comments on pages that put user-controlled data in them. This vulnerability affects Firefox < 101.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-79
Affected vendors: mozilla
Affected products: firefox
CVE-2022-31744 (published 2022-12-22)
An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR < 91.11, Thunderbird < 102, Thunderbird < 91.11, and Firefox < 101.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-79
Affected vendors: mozilla
Affected products: firefox, firefox_esr, thunderbird
CVE-2022-31745 (published 2022-12-22)
If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox < 101.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Weakness: CWE-129
Affected vendors: mozilla
Affected products: firefox
CVE-2022-31746 (published 2022-12-22)
Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-200
Affected vendors: mozilla
Affected products: firefox
CVE-2022-31747 (published 2022-12-22)
Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: mozilla
Affected products: firefox, firefox_esr, thunderbird
CVE-2022-31748 (published 2022-12-22)
Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 101.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: mozilla
Affected products: firefox
CVE-2022-3175 (published 2022-09-13)
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-756
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-31751 (published 2022-06-13)
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-31752 (published 2022-06-13)
Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-862
Affected vendors: huawei
Affected products: emui, magic_ui
CVE-2022-31753 (published 2022-06-13)
The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-134
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-31754 (published 2022-06-13)
Logical defects in code implementation in some products. Successful exploitation of this vulnerability may affect the availability of some features.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, magic_ui
CVE-2022-31755 (published 2022-06-13)
The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-281
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-31756 (published 2022-06-13)
The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-31757 (published 2022-06-13)
The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-31758 (published 2022-06-13)
The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-362
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-31759 (published 2022-06-13)
AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-824
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-3176 (published 2022-09-16)
There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the io_uring poll doesn't handle POLLFREE. This allows a use-after-free to occur if a signalfd or binder fd is polled with io_uring poll, and the waitqueue gets freed. We recommend upgrading past commit fc78b2fc21f10c4c9c4d5d659a685710ffa63659
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: debian, linux
Affected products: debian_linux, linux_kernel
CVE-2022-31760 (published 2022-06-13)
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-31761 (published 2022-06-13)
Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: huawei
Affected products: emui, magic_ui
CVE-2022-31762 (published 2022-06-13)
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-31763 (published 2022-06-13)
The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2022-31765 (published 2022-10-11)
Affected devices do not properly authorize the change password function of the web interface.
This could allow low privileged users to escalate their privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-862
Affected vendors: siemens
Affected products: 6ag1206-2bb00-7ac2, 6ag1206-2bb00-7ac2_firmware, 6ag1206-2bs00-7ac2, 6ag1206-2bs00-7ac2_firmware, 6ag1208-0ba00-7ac2, 6ag1208-0ba00-7ac2_firmware, 6ag1216-4bs00-7ac2, 6ag1216-4bs00-7ac2_firmware, 6gk5204-0ba00-2gf2, 6gk5204-0ba00-2gf2_firmware, 6gk5204-0ba00-2yf2, 6gk5204-0ba00-2yf2_firmware, 6gk5204-2aa00-2gf2, 6gk5204-2aa00-2gf2_firmware, 6gk5204-2aa00-2yf2, 6gk5204-2aa00-2yf2_firmware, 6gk5205-3bb00-2ab2, 6gk5205-3bb00-2ab2_firmware, 6gk5205-3bb00-2tb2, 6gk5205-3bb00-2tb2_firmware, 6gk5205-3bd00-2ab2, 6gk5205-3bd00-2ab2_firmware, 6gk5205-3bd00-2tb2, 6gk5205-3bd00-2tb2_firmware, 6gk5205-3bf00-2ab2
CVE-2022-31766 (published 2022-10-11)
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.1.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.1.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.1.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.1.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.1.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.1.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.1.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.1.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.1.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.1.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.1.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.1.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.1.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.1.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.1.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.1.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.1.2), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions >= V1.1.0 < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions >= V1.1.0 < V3.0.0). Affected devices with TCP Event service enabled do not properly handle malformed packets.
This could allow an unauthenticated remote attacker to cause a denial of service condition and reboot the device thus possibly affecting other network resources.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: siemens
Affected products: ruggedcom_rm1224, ruggedcom_rm1224_firmware, scalance_m804pb, scalance_m804pb_firmware, scalance_m812-1, scalance_m812-1_firmware, scalance_m816-1, scalance_m816-1_firmware, scalance_m826-2, scalance_m826-2_firmware, scalance_m874-2, scalance_m874-2_firmware, scalance_m874-3, scalance_m874-3_firmware, scalance_m876-3, scalance_m876-3_firmware, scalance_m876-4, scalance_m876-4_firmware, scalance_mum853-1, scalance_mum853-1_firmware, scalance_mum856-1, scalance_mum856-1_firmware, scalance_s615, scalance_s615_firmware, scalance_wam763-1
CVE-2022-31767 (published 2022-06-24)
IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 227980.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: ibm, linux
Affected products: cics_tx, linux_kernel
CVE-2022-31768 (published 2022-06-06)
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: ibm
Affected products: infosphere_information_server
CVE-2022-31769 (published 2022-06-10)
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system. IBM X-Force ID: 228219.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: ibm, linux
Affected products: linux_kernel, spectrum_copy_data_management
CVE-2022-31770 (published 2022-07-05)
IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: ibm
Affected products: app_connect_enterprise_certified_container
CVE-2022-31772 (published 2022-11-11)

IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.


Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: hp, ibm, linux, microsoft, oracle
Affected products: aix, hp-ux, i, linux_kernel, linux_on_ibm_z, mq, solaris, windows
CVE-2022-31773 (published 2022-08-26)
IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 228357.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: ibm
Affected products: datapower_gateway
CVE-2022-31774 (published 2022-08-01)
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 228358.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: ibm
Affected products: datapower_gateway
CVE-2022-31775 (published 2022-08-01)
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228359.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-611
Affected vendors: ibm
Affected products: datapower_gateway
CVE-2022-31776 (published 2022-08-01)
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 228433.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-918
Affected vendors: ibm
Affected products: datapower_gateway
CVE-2022-31777 (published 2022-11-01)
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-74
Affected vendors: apache
Affected products: spark
CVE-2022-31778 (published 2022-08-10)
Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: apache, debian
Affected products: debian_linux, traffic_server
CVE-2022-31779 (published 2022-08-10)
Improper Input Validation vulnerability in HTTP/2 header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: apache, debian, fedoraproject
Affected products: debian_linux, fedora, traffic_server
CVE-2022-3178 (published 2022-09-12)
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-126
Affected vendors: gpac
Affected products: gpac
CVE-2022-31780 (published 2022-08-10)
Improper Input Validation vulnerability in HTTP/2 frame handling of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: apache, debian, fedoraproject
Affected products: debian_linux, fedora, traffic_server
CVE-2022-31781 (published 2022-07-13)
Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles Content Types. Specially crafted Content Types may cause catastrophic backtracking, taking exponential time to complete. Specifically, this is about the regular expression used on the parameter of the org.apache.tapestry5.http.ContentType class. Apache Tapestry 5.8.2 has a fix for this vulnerability. Notice the vulnerability cannot be triggered by web requests in Tapestry code alone. It would only happen if there's some non-Tapestry codepath passing some outside input to the ContentType class constructor.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-1333
Affected vendors: apache
Affected products: tapestry
CVE-2022-31782 (published 2022-06-02)
ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: freedesktop
Affected products: freetype_demo_programs
CVE-2022-31783 (published 2022-06-02)
Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: fedoraproject, liblouis
Affected products: fedora, liblouis
CVE-2022-31784 (published 2022-06-17)
A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker (that has network access to the management interface) to conduct a buffer overflow attack due to insufficient validation of URL parameters. A successful exploit could allow arbitrary code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: mitel
Affected products: mivoice_business, mivoice_business_express
CVE-2022-31786 (published 2022-06-21)
IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: ideaco
Affected products: idealms
CVE-2022-31787 (published 2022-06-23)
IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: ideaco
Affected products: ideatms
CVE-2022-31788 (published 2022-06-10)
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: ideaco
Affected products: idealms
CVE-2022-31789 (published 2022-09-06)
An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: watchguard
Affected products: fireware
CVE-2022-3179 (published 2022-09-13)
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-521
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-31790 (published 2022-09-06)
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: watchguard
Affected products: fireware
CVE-2022-31791 (published 2022-09-06)
WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: watchguard
Affected products: fireware
CVE-2022-31792 (published 2022-09-06)
A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker can potentially execute arbitrary JavaScript code in the management web interface by sending crafted requests to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: watchguard
Affected products: fireware
CVE-2022-31793 (published 2022-08-04)
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: arris, inglorion
Affected products: bgw210, bgw210_firmware, bgw320, bgw320_firmware, muhttpd, nvg443, nvg443_firmware, nvg510, nvg510_firmware, nvg589, nvg589_firmware, nvg599, nvg599_firmware
CVE-2022-31794 (published 2022-06-20)
An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hw_view.php. An attacker is able to influence the unitName POST parameter and inject special characters such as semicolons, backticks, or command-substitution sequences in order to force the application to execute arbitrary commands.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: fujitsu
Affected products: eternus_cs8000, eternus_cs8000_firmware
CVE-2022-31795 (published 2022-06-20)
An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the grel_finfo function in grel.php. An attacker is able to influence the username (user), password (pw), and file-name (file) parameters and inject special characters such as semicolons, backticks, or command-substitution sequences in order to force the application to execute arbitrary commands.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: fujitsu
Affected products: eternus_cs8000, eternus_cs8000_firmware
CVE-2022-31796 (published 2022-06-02)
libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: jpeg
Affected products: libjpeg
CVE-2022-31798 (published 2022-08-25)
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-384
Affected vendors: nortekcontrol
Affected products: emerge_e3, emerge_e3_firmware
CVE-2022-31799 (published 2022-06-02)
Bottle before 0.12.20 mishandles errors during early request binding.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-755
Affected vendors: bottlepy, debian, fedoraproject
Affected products: bottle, debian_linux, fedora
CVE-2022-31800 (published 2022-06-21)
An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-345
Affected vendors: phoenixcontact
Affected products: axc_1050, axc_1050_firmware, axc_1050_xc, axc_1050_xc_firmware, axc_3050, axc_3050_firmware, fc_350_pci_eth, fc_350_pci_eth_firmware, ilc1x0, ilc1x0_firmware, ilc1x1, ilc1x1_firmware, ilc_1x1_gsm\/gprs, ilc_1x1_gsm\/gprs_firmware, ilc_3xx, ilc_3xx_firmware, pc_worx_rt_basic, pc_worx_rt_basic_firmware, pc_worx_srt, pc_worx_srt_firmware, rfc_430_eth-ib, rfc_430_eth-ib_firmware, rfc_450_eth-ib, rfc_450_eth-ib_firmware, rfc_460r_pn_3tx
CVE-2022-31801 (published 2022-06-21)
An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-345
Affected vendors: phoenixcontact, phoenixcontact-software
Affected products: multiprog, proconos, proconos_eclr
CVE-2022-31802 (published 2022-06-24)
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-187
Affected vendors: codesys
Affected products: gateway
CVE-2022-31803 (published 2022-06-24)
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections are not affected and therefore remain intact.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-400
Affected vendors: codesys
Affected products: gateway
CVE-2022-31804 (published 2022-06-24)
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-789
Affected vendors: codesys
Affected products: gateway
CVE-2022-31805 (published 2022-06-24)
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-523
Affected vendors: codesys
Affected products: development_system, edge_gateway, gateway, hmi_sl, opc_server, plchandler, plcwinnt, runtime_toolkit, sp_realtime_nt, web_server
CVE-2022-31806 (published 2022-06-24)
In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1188
Affected vendors: codesys
Affected products: plcwinnt, runtime_toolkit
CVE-2022-31808 (published 2023-02-14)
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface.

This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: siemens
Affected products: sipass_integrated_ac5102_\(acc-g2\), sipass_integrated_ac5102_\(acc-g2\)_firmware, sipass_integrated_acc-ap, sipass_integrated_acc-ap_firmware
CVE-2022-3181 (published 2022-11-02)
An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifically malformed HTTP request could cause the affected VTScada to crash. Both local area network (LAN)-only and internet facing systems are affected. 


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: trihedral
Affected products: vtscada
CVE-2022-31810 (published 2023-07-11)
A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow.

This could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: siemens
Affected products: sipass_integrated
CVE-2022-31813 (published 2022-06-09)
Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-348
Affected vendors: apache, fedoraproject, netapp
Affected products: clustered_data_ontap, fedora, http_server
CVE-2022-31814 (published 2022-09-05)
pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: netgate
Affected products: pfblockerng
CVE-2022-3182 (published 2022-09-13)
Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock. This issue affects: Devolutions Remote Desktop Manager version 2022.2.14 and prior versions.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: devolutions
Affected products: remote_desktop_manager
CVE-2022-31827 (published 2022-06-09)
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-918
Affected vendors: monstaftp
Affected products: monstaftp
CVE-2022-3183 (published 2022-12-21)
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability. 




Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dataprobe
Affected products: iboot-pdu4-n20, iboot-pdu4-n20_firmware, iboot-pdu4a-n15, iboot-pdu4a-n15_firmware, iboot-pdu4a-n20, iboot-pdu4a-n20_firmware, iboot-pdu4sa-n15, iboot-pdu4sa-n15_firmware, iboot-pdu4sa-n20, iboot-pdu4sa-n20_firmware, iboot-pdu8a-2n15, iboot-pdu8a-2n15_firmware, iboot-pdu8a-2n20, iboot-pdu8a-2n20_firmware, iboot-pdu8a-n15, iboot-pdu8a-n15_firmware, iboot-pdu8a-n20, iboot-pdu8a-n20_firmware, iboot-pdu8sa-2n15, iboot-pdu8sa-2n15_firmware, iboot-pdu8sa-n15, iboot-pdu8sa-n15_firmware, iboot-pdu8sa-n20, iboot-pdu8sa-n20_firmware
CVE-2022-31830 (published 2022-06-09)
Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-918
Affected vendors: baidu
Affected products: kity_minder
CVE-2022-31836 (published 2022-07-05)
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: beego
Affected products: beego
CVE-2022-3184 (published 2022-12-21)
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot directory.

 




Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: dataprobe
Affected products: iboot-pdu4-n20, iboot-pdu4-n20_firmware, iboot-pdu4a-n15, iboot-pdu4a-n15_firmware, iboot-pdu4a-n20, iboot-pdu4a-n20_firmware, iboot-pdu4sa-n15, iboot-pdu4sa-n15_firmware, iboot-pdu4sa-n20, iboot-pdu4sa-n20_firmware, iboot-pdu8a-2n15, iboot-pdu8a-2n15_firmware, iboot-pdu8a-2n20, iboot-pdu8a-2n20_firmware, iboot-pdu8a-n15, iboot-pdu8a-n15_firmware, iboot-pdu8a-n20, iboot-pdu8a-n20_firmware, iboot-pdu8sa-2n15, iboot-pdu8sa-2n15_firmware, iboot-pdu8sa-n15, iboot-pdu8sa-n15_firmware, iboot-pdu8sa-n20, iboot-pdu8sa-n20_firmware
CVE-2022-31845 (published 2022-06-14)
A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-668
Affected vendors: wavlink
Affected products: wn535g3, wn535g3_firmware
CVE-2022-31846 (published 2022-06-14)
A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-668
Affected vendors: wavlink
Affected products: wn535g3, wn535g3_firmware
CVE-2022-31847 (published 2022-06-14)
A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted POST request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-425
Affected vendors: wavlink
Affected products: wn579x3, wn579x3_firmware
CVE-2022-31849 (published 2022-06-16)
MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: mercurycom
Affected products: mipc451-4, mipc451-4_firmware
CVE-2022-3185 (published 2022-12-21)
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensitive data concerning the device.


Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: dataprobe
Affected products: iboot-pdu4-n20, iboot-pdu4-n20_firmware, iboot-pdu4a-n15, iboot-pdu4a-n15_firmware, iboot-pdu4a-n20, iboot-pdu4a-n20_firmware, iboot-pdu4sa-n15, iboot-pdu4sa-n15_firmware, iboot-pdu4sa-n20, iboot-pdu4sa-n20_firmware, iboot-pdu8a-2n15, iboot-pdu8a-2n15_firmware, iboot-pdu8a-2n20, iboot-pdu8a-2n20_firmware, iboot-pdu8a-n15, iboot-pdu8a-n15_firmware, iboot-pdu8a-n20, iboot-pdu8a-n20_firmware, iboot-pdu8sa-2n15, iboot-pdu8sa-2n15_firmware, iboot-pdu8sa-n15, iboot-pdu8sa-n15_firmware, iboot-pdu8sa-n20, iboot-pdu8sa-n20_firmware
CVE-2022-31854 (published 2022-07-07)
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: codologic
Affected products: codoforum
CVE-2022-31856 (published 2022-07-05)
Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter at /index.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: newsletter_module_project
Affected products: newsletter_module
CVE-2022-3186 (published 2022-12-21)
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other device's information.


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-284
Affected vendors: dataprobe
Affected products: iboot-pdu4-n20, iboot-pdu4-n20_firmware, iboot-pdu4a-n15, iboot-pdu4a-n15_firmware, iboot-pdu4a-n20, iboot-pdu4a-n20_firmware, iboot-pdu4sa-n15, iboot-pdu4sa-n15_firmware, iboot-pdu4sa-n20, iboot-pdu4sa-n20_firmware, iboot-pdu8a-2n15, iboot-pdu8a-2n15_firmware, iboot-pdu8a-2n20, iboot-pdu8a-2n20_firmware, iboot-pdu8a-n15, iboot-pdu8a-n15_firmware, iboot-pdu8a-n20, iboot-pdu8a-n20_firmware, iboot-pdu8sa-2n15, iboot-pdu8sa-2n15_firmware, iboot-pdu8sa-n15, iboot-pdu8sa-n15_firmware, iboot-pdu8sa-n20, iboot-pdu8sa-n20_firmware
CVE-2022-31860 (published 2022-09-06)
An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: openremote
Affected products: openremote
CVE-2022-31861 (published 2022-09-13)
Cross site Scripting (XSS) in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: thingsboard
Affected products: thingsboard
CVE-2022-3187 (published 2022-12-21)
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of verification to read the state of outlets. 




Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-285
Affected vendors: dataprobe
Affected products: iboot-pdu4-n20, iboot-pdu4-n20_firmware, iboot-pdu4a-n15, iboot-pdu4a-n15_firmware, iboot-pdu4a-n20, iboot-pdu4a-n20_firmware, iboot-pdu4sa-n15, iboot-pdu4sa-n15_firmware, iboot-pdu4sa-n20, iboot-pdu4sa-n20_firmware, iboot-pdu8a-2n15, iboot-pdu8a-2n15_firmware, iboot-pdu8a-2n20, iboot-pdu8a-2n20_firmware, iboot-pdu8a-n15, iboot-pdu8a-n15_firmware, iboot-pdu8a-n20, iboot-pdu8a-n20_firmware, iboot-pdu8sa-2n15, iboot-pdu8sa-2n15_firmware, iboot-pdu8sa-n15, iboot-pdu8sa-n15_firmware, iboot-pdu8sa-n20, iboot-pdu8sa-n20_firmware