alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-33292 (published 2023-05-02)
Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: sg4150p, sg4150p_firmware, sm6225, sm6225-ad, sm6225-ad_firmware, sm6225_firmware, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcn3950, wcn3950_firmware, wcn3988, wcn3988_firmware, wsa8810, wsa8810_firmware
CVE-2022-33294 (published 2023-04-13)
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330, wcd9330_firmware
CVE-2022-33295 (published 2023-04-13)
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330, wcd9330_firmware
CVE-2022-33296 (published 2023-04-13)
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-680
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, 8905, 8905_firmware, 8909, 8909_firmware, 8917, 8917_firmware, apq8017, apq8017_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csrb31024, csrb31024_firmware, mdm9628, mdm9628_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6390, qca6390_firmware, qca6391
CVE-2022-33297 (published 2023-04-13)
Information disclosure due to buffer overread in Linux sensors
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: qca6310, qca6310_firmware, qca6320, qca6320_firmware, sd835, sd835_firmware, snapdragon_835_mobile_platform, snapdragon_835_mobile_platform_firmware, wcd9335, wcd9335_firmware, wcd9340, wcd9340_firmware, wcd9341, wcd9341_firmware, wcn3990, wcn3990_firmware, wsa8810, wsa8810_firmware, wsa8815, wsa8815_firmware
CVE-2022-33298 (published 2023-04-13)
Memory corruption due to use after free in Modem while modem initialization.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6564, qca6564_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au
CVE-2022-33299 (published 2023-01-09)
Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, apq8096au, apq8096au_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9150, mdm9150_firmware, mdm9206, mdm9206_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9628, mdm9628_firmware, mdm9640, mdm9640_firmware, mdm9650
CVE-2022-3330 (published 2022-10-17)
It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: gitlab
Affected products: gitlab
CVE-2022-33300 (published 2023-01-09)
Memory corruption in Automotive Android OS due to improper input validation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: qam8295p, qam8295p_firmware, qca6174a, qca6174a_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6426, qca6426_firmware, qca6436, qca6436_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca9377, qca9377_firmware, qcc5100, qcc5100_firmware, qcn9011, qcn9011_firmware, qcn9012
CVE-2022-33301 (published 2023-04-13)
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-704
Affected vendors: qualcomm
Affected products: qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, sa6150p, sa6150p_firmware, sa6155p, sa6155p_firmware, sa8145p, sa8145p_firmware, sa8150p, sa8150p_firmware, sa8155p, sa8155p_firmware, sa8195p, sa8195p_firmware, snapdragon_w5\+_gen_1_wearable_platform, snapdragon_w5\+_gen_1_wearable_platform_firmware, sw5100, sw5100_firmware, sw5100p, sw5100p_firmware, wcn3980
CVE-2022-33302 (published 2023-04-13)
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, 8905, 8905_firmware, 8909, 8909_firmware, 8917, 8917_firmware, 8920, 8920_firmware, 8937, 8937_firmware, 8940, 8940_firmware, 8953, 8953_firmware, 8953pro, 8953pro_firmware, 9205_lte_modem, 9205_lte_modem_firmware, 9206_lte_modem, 9206_lte_modem_firmware, 9207_lte_modem, 9207_lte_modem_firmware, apq5053-aa
CVE-2022-33303 (published 2023-06-06)
Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: qualcomm
Affected products: qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155p, sa6155p_firmware, sa8145p, sa8145p_firmware, sa8150p, sa8150p_firmware, sa8155p, sa8155p_firmware, sa8195p, sa8195p_firmware, sm8350, sm8350-ac, sm8350-ac_firmware, sm8350_firmware, sm8450
CVE-2022-33304 (published 2023-05-02)
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: 9205_lte_modem, 9205_lte_modem_firmware, 9206_lte_modem, 9206_lte_modem_firmware, 9207_lte_modem, 9207_lte_modem_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, qca-4020-0-217msp, qca-4020-0-217msp_firmware, qca-4020-1-217msp, qca-4020-1-217msp_firmware, qca-4024-0-68cmqfn, qca-4024-0-68cmqfn_firmware, qca-4024-1-68cmqfn, qca-4024-1-68cmqfn_firmware, qca4004, qca4004_firmware, qca4024
CVE-2022-33305 (published 2023-05-02)
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6574a, qca6574a_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcm2290, qcm2290_firmware, qcm4290
CVE-2022-33306 (published 2023-02-12)
Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8064, ipq8064_firmware, ipq8065, ipq8065_firmware, ipq8068
CVE-2022-33307 (published 2023-06-06)
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426
CVE-2022-33309 (published 2023-03-10)
Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: csr8811, csr8811_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8070a, ipq8070a_firmware, ipq8071a, ipq8071a_firmware, ipq8072a, ipq8072a_firmware, ipq8074a, ipq8074a_firmware, ipq8076
CVE-2022-3331 (published 2022-10-17)
An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited by an attacker to leak Zentao project issues.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-639
Affected vendors: gitlab
Affected products: gitlab
CVE-2022-33311 (published 2022-08-18)
Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: cybozu
Affected products: office
CVE-2022-33312 (published 2022-06-30)
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_cert_file/` API is affected by command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: robustel
Affected products: r1510, r1510_firmware
CVE-2022-33313 (published 2022-06-30)
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_https_cert_file/` API is affected by command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: robustel
Affected products: r1510, r1510_firmware
CVE-2022-33314 (published 2022-06-30)
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_sdk_file/` API is affected by command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: robustel
Affected products: r1510, r1510_firmware
CVE-2022-33315 (published 2022-07-20)
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious XAML codes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: iconics, mitsubishielectric
Affected products: genesis64, mc_works64
CVE-2022-33316 (published 2022-07-20)
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious XAML codes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: iconics, mitsubishielectric
Affected products: genesis64, mc_works64
CVE-2022-33317 (published 2022-07-20)
Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a monitoring screen file including malicious script codes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-829
Affected vendors: iconics, mitsubishielectric
Affected products: genesis64, mc_works64
CVE-2022-33318 (published 2022-07-20)
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the GENESIS64, ICONICS Suite, GENESIS32, or MC Works64 server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: iconics, mitsubishielectric
Affected products: genesis64, mc_works64
CVE-2022-33319 (published 2022-07-20)
Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows a remote unauthenticated attacker to disclose information on memory or cause a Denial of Service (DoS) condition by sending specially crafted packets to the GENESIS64, ICONICS Suite, GENESIS32, or MC Works64 server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: iconics, mitsubishielectric
Affected products: genesis64, mc_works64
CVE-2022-3332 (published 2022-09-28)
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-209583.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-707
Affected vendors: food_ordering_management_system_project
Affected products: food_ordering_management_system
CVE-2022-33320 (published 2022-07-20)
Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows an unauthenticated attacker to execute an arbitrary malicious code by leading a user to load a project configuration file including malicious XML codes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: iconics, mitsubishielectric
Affected products: genesis64, mc_works64
CVE-2022-33321 (published 2022-11-08)
Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch, Ventilating Fan, Range hood fan, Energy Measurement Unit and Air Purifier) allows a remote unauthenticated attacker to disclose information in the products or cause a denial of service (DoS) condition as a result by sniffing credential information (username and password).
The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability.
As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.


Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-319
Affected vendors: mitsubishielectric
Affected products: ma-ew85s-e, ma-ew85s-e_firmware, ma-ew85s-uk, ma-ew85s-uk_firmware, mac-507if-e, mac-507if-e_firmware, mac-557if-e, mac-557if-e1, mac-557if-e1_firmware, mac-557if-e_firmware, mac-558if-e, mac-558if-e1, mac-558if-e1_firmware, mac-558if-e_firmware, mac-559if-e, mac-559if-e1, mac-559if-e1_firmware, mac-559if-e_firmware, mac-566ifb-e, mac-566ifb-e_firmware, mac-567ifb-e, mac-567ifb-e_firmware, mac-567ifb2-e, mac-567ifb2-e_firmware, mac-568if-e
CVE-2022-33322 (published 2022-11-08)
Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious script on a user's browser to disclose information, etc. The wide range of models/versions of Mitsubishi Electric consumer electronics products are affected by this vulnerability. As for the affected product models/versions, see the Mitsubishi Electric's advisory which is listed in [References] section.


Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: mitsubishielectric
Affected products: ma-ew85s-e, ma-ew85s-e_firmware, ma-ew85s-uk, ma-ew85s-uk_firmware, mac-507if-e, mac-507if-e_firmware, mac-587if-e, mac-587if-e_firmware, mac-587if2-e, mac-587if2-e_firmware, mac-588if-e, mac-588if-e_firmware, mfz-gxt50\/60\/73vfk, mfz-gxt50\/60\/73vfk_firmware, mfz-xt50\/60vfk, mfz-xt50\/60vfk_firmware, msxy-fp05\/07\/10\/13\/18\/20\/24vgk-sg1, msxy-fp05\/07\/10\/13\/18\/20\/24vgk-sg1_firmware, msy-gp10\/13\/15\/18\/20\/24vfk-sg1, msy-gp10\/13\/15\/18\/20\/24vfk-sg1_firmware, msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-e2, msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-e2_firmware, msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-er2, msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-er2_firmware, msz-ap15\/20\/25\/35\/42\/50\/60\/71vgk-et2
CVE-2022-33323 (published 2023-02-02)
Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-489
Affected vendors: mitsubishielectric
Affected products: rh-12fh55, rh-12fh55_firmware, rh-12fh70, rh-12fh70_firmware, rh-12fh85, rh-12fh85_firmware, rh-12sdh55, rh-12sdh55_firmware, rh-12sdh70, rh-12sdh70_firmware, rh-12sdh85, rh-12sdh85_firmware, rh-12sqh55, rh-12sqh55_firmware, rh-12sqh70, rh-12sqh70_firmware, rh-12sqh85, rh-12sqh85_firmware, rh-20fh100, rh-20fh100_firmware, rh-20fh85, rh-20fh85_firmware, rh-20sdh100, rh-20sdh100_firmware, rh-20sdh85
CVE-2022-33324 (published 2022-12-23)
Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-404
Affected vendors: mitsubishi
Affected products: melipc_mi5122-vw, melipc_mi5122-vw_firmware, melsec_iq-l_l04_hcpu, melsec_iq-l_l04_hcpu_firmware, melsec_iq-l_l08_hcpu, melsec_iq-l_l08_hcpu_firmware, melsec_iq-l_l16_hcpu, melsec_iq-l_l16_hcpu_firmware, melsec_iq-l_l32_hcpu, melsec_iq-l_l32_hcpu_firmware, melsec_iq-r_r00_cpu, melsec_iq-r_r00_cpu_firmware, melsec_iq-r_r01_cpu, melsec_iq-r_r01_cpu_firmware, melsec_iq-r_r02_cpu, melsec_iq-r_r02_cpu_firmware, melsec_iq-r_r04_cpu, melsec_iq-r_r04_cpu_firmware, melsec_iq-r_r04_sfcpu, melsec_iq-r_r04_sfcpu_firmware, melsec_iq-r_r08_cpu, melsec_iq-r_r08_cpu_firmware, melsec_iq-r_r08_sfcpu, melsec_iq-r_r08_sfcpu_firmware, melsec_iq-r_r120_cpu
CVE-2022-33325 (published 2022-06-30)
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/clear_tools_log/` API is affected by command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: robustel
Affected products: r1510, r1510_firmware
CVE-2022-33326 (published 2022-06-30)
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/config_rollback/` API is affected by a command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: robustel
Affected products: r1510, r1510_firmware
CVE-2022-33327 (published 2022-06-30)
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/remove_sniffer_raw_log/` API is affected by a command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: robustel
Affected products: r1510, r1510_firmware
CVE-2022-33328 (published 2022-06-30)
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/remove/` API is affected by a command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: robustel
Affected products: r1510, r1510_firmware
CVE-2022-33329 (published 2022-06-30)
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/set_sys_time/` API is affected by a command injection vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: robustel
Affected products: r1510, r1510_firmware
CVE-2022-3333 (published 2022-09-28)
A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler. The manipulation of the argument onanimationstart leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 3.2.5 is able to address this issue. It is recommended to upgrade the affected component. VDB-209370 is the identifier assigned to this vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-707
Affected vendors: zephyr-one
Affected products: zephyr_project_manager
CVE-2022-3334 (published 2022-10-31)
The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: wp-ecommerce
Affected products: easy_wp_smtp
CVE-2022-3335 (published 2022-10-25)
The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: kadencewp
Affected products: kadence_woocommerce_email_designer
CVE-2022-3336 (published 2022-11-21)
The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arbitrary visitors via a CSRF attack
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Affected vendors: awplife
Affected products: event_monster
CVE-2022-3337 (published 2022-10-28)
It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the  Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch  feature
 being enabled on Zero Trust Platform. This led to bypassing policies 
and restrictions enforced for enrolled devices by the Zero Trust 
platform.




Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L)
Weakness: CWE-862
Affected vendors: cloudflare
Affected products: warp_mobile_client
CVE-2022-3338 (published 2022-10-18)
An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing the carefully constructed XML file through the API.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)
Weakness: CWE-611
Affected vendors: mcafee
Affected products: epolicy_orchestrator
CVE-2022-3339 (published 2022-10-18)
A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: mcafee
Affected products: epolicy_orchestrator
CVE-2022-3340 (published 2022-11-04)
XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-611
Affected vendors: trellix
Affected products: intrusion_prevention_system_manager
CVE-2022-3341 (published 2023-01-12)
A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-476
Affected vendors: debian, ffmpeg
Affected products: debian_linux, ffmpeg
CVE-2022-3342 (published 2023-10-20)
The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the ‘zbscrmcsvimpf’ parameter in the 'zeroBSCRM_CSVImporterLitehtml_app' function in versions up to, and including, 5.3.1. While the function performs a nonce check, steps 2 and 3 of the check do not take any action upon a failed check. These steps then perform a 'file_exists' check on the value of 'zbscrmcsvimpf'. If a phar:// archive is supplied, its contents will be deserialized and an object injected in the execution stream. This allows an unauthenticated attacker to obtain object injection if they are able to upload a phar archive (for instance if the site supports image uploads) and then trick an administrator into performing an action, such as clicking a link.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: automattic
Affected products: jetpack_crm
CVE-2022-3343 (published 2023-01-09)
The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate that a user already follows another in the wpqa_following_you_ajax action, allowing a user to inflate their score on the site by having another user send repeated follow actions to them.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)
Affected vendors: 2code
Affected products: wpqa_builder
CVE-2022-3344 (published 2022-10-25)
A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-440
Affected vendors: linux
Affected products: linux_kernel
CVE-2022-3346 (published 2022-12-28)
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. The owner name of RRSIG RRs is not validated, permitting an attacker to present the RRSIG for an attacker-controlled domain in a response for any other domain.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-345
Affected vendors: go-resolver_project
Affected products: go-resolver
CVE-2022-3347 (published 2022-12-28)
DNSSEC validation is not performed correctly. An attacker can cause this package to report successful validation for invalid, attacker-controlled records. Root DNSSEC public keys are not validated, permitting an attacker to present a self-signed root key and delegation chain.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-345
Affected vendors: go-resolver_project
Affected products: go-resolver
CVE-2022-3348 (published 2022-09-28)
Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit more specific, because it is needed to be an editor in the same app as the victim.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: tooljet
Affected products: tooljet
CVE-2022-3349 (published 2022-09-28)
A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical device. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-209679.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: sony
Affected products: playstation_4, playstation_4_firmware, playstation_5, playstation_5_firmware
CVE-2022-3350 (published 2022-10-25)
The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: tech-banker
Affected products: contact_bank
CVE-2022-3351 (published 2022-10-17)
An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A user's primary email may be disclosed to an attacker through group member events webhooks.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: gitlab
Affected products: gitlab
CVE-2022-3352 (published 2022-09-29)
Use After Free in GitHub repository vim/vim prior to 9.0.0614.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: debian, fedoraproject, vim
Affected products: debian_linux, fedora, vim
CVE-2022-3354 (published 2022-09-28)
A vulnerability has been found in Open5GS up to 2.4.10 and classified as problematic. This vulnerability affects unknown code in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-209686 is the identifier assigned to this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-404
Affected vendors: open5gs
Affected products: open5gs
CVE-2022-3355 (published 2022-09-29)
Cross-site Scripting (XSS) - Stored in GitHub repository inventree/inventree prior to 0.8.3.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: inventree_project
Affected products: inventree
CVE-2022-3357 (published 2022-10-31)
The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: nextendweb
Affected products: smart_slider_3
CVE-2022-3358 (published 2022-10-11)
OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and EVP_CipherInit_ex2() functions (as well as other similarly named encryption and decryption initialisation functions). Instead of using the custom cipher directly it incorrectly tries to fetch an equivalent cipher from the available providers. An equivalent cipher is found based on the NID passed to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID for a given cipher. However it is possible for an application to incorrectly pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When NID_undef is used in this way the OpenSSL encryption/decryption initialisation function will match the NULL cipher as being equivalent and will fetch this from the available providers. This will succeed if the default provider has been loaded (or if a third party provider has been loaded that offers this cipher). Using the NULL cipher means that the plaintext is emitted as the ciphertext. Applications are only affected by this issue if they call EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to an encryption/decryption initialisation function. Applications that only use SSL/TLS are not impacted by this issue. Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-476
Affected vendors: openssl
Affected products: openssl
CVE-2022-3359 (published 2022-12-12)
The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported file, which could lead to PHP object injection when a user imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: averta
Affected products: shortcodes_and_extra_features_for_phlox_theme
CVE-2022-3360 (published 2022-10-31)
The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Object Injection when a suitable gadget is present, leadint to remote code execution (RCE). To successfully exploit this vulnerability attackers must have knowledge of the site secrets, allowing them to generate a valid hash via the wp_hash() function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: thimpress
Affected products: learnpress
CVE-2022-3361 (published 2022-11-29)
The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due to insufficient input validation on the 'template' attribute used in shortcodes. This makes it possible for attackers with administrative privileges to supply arbitrary paths using traversal (../../) to access and include files outside of the intended directory. If an attacker can successfully upload a php file then remote code execution via inclusion may also be possible. Note: for users with less than administrative capabilities, /wp-admin access needs to be enabled for that user in order for this to be exploitable by those users.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-22
Affected vendors: ultimatemember
Affected products: ultimate_member
CVE-2022-3362 (published 2022-11-14)
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-613
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-3363 (published 2022-10-26)
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-840
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-33631 (published 2022-08-09)
Microsoft Excel Security Feature Bypass Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-693
Affected vendors: microsoft
Affected products: 365_apps, excel, office, office_long_term_servicing_channel
CVE-2022-33632 (published 2022-07-12)
Microsoft Office Security Feature Bypass Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)
Affected vendors: microsoft
Affected products: 365_apps, office, office_long_term_servicing_channel
CVE-2022-33633 (published 2022-07-12)
Skype for Business and Lync Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: lync_server, skype_for_business
CVE-2022-33634 (published 2022-10-11)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: microsoft
Affected products: windows_10, windows_11, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022
CVE-2022-33635 (published 2022-10-11)
Windows GDI+ Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_11, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022
CVE-2022-33636 (published 2022-08-09)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: microsoft
Affected products: edge_chromium
CVE-2022-33637 (published 2022-07-12)
Microsoft Defender for Endpoint Tampering Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: microsoft
Affected products: defender_for_endpoint
CVE-2022-33638 (published 2022-06-29)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: edge_chromium
CVE-2022-33639 (published 2022-06-29)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: edge_chromium
CVE-2022-3364 (published 2022-09-29)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-33640 (published 2022-08-09)
System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: microsoft
Affected products: open_management_infrastructure, system_center_operations_manager
CVE-2022-33641 (published 2022-07-12)
Azure Site Recovery Elevation of Privilege Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Affected vendors: microsoft
Affected products: azure_site_recovery_vmware_to_azure
CVE-2022-33642 (published 2022-07-12)
Azure Site Recovery Elevation of Privilege Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: azure_site_recovery_vmware_to_azure
CVE-2022-33643 (published 2022-07-12)
Azure Site Recovery Elevation of Privilege Vulnerability
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Affected vendors: microsoft
Affected products: azure_site_recovery_vmware_to_azure
CVE-2022-33644 (published 2022-07-12)
Xbox Live Save Service Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10
CVE-2022-33645 (published 2022-10-11)
Windows TCP/IP Driver Denial of Service Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_11, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022
CVE-2022-33646 (published 2022-08-09)
Azure Batch Node Agent Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: microsoft
Affected products: azure_batch
CVE-2022-33647 (published 2022-09-13)
Windows Kerberos Elevation of Privilege Vulnerability
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022