alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-29767 (published 2022-06-03)
adbyby v2.7 allows external users to make connections via port 8118. This can cause a program logic error and lead to a Denial of Service (DoS) via high CPU usage due to a large number of connections.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: adbyby_project
Affected products: adbyby
CVE-2022-2977 (published 2022-09-14)
A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: linux
Affected products: linux_kernel
CVE-2022-29770 (published 2022-06-03)
XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: xuxueli
Affected products: xxl-job
CVE-2022-29773 (published 2022-06-03)
An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: aleksis
Affected products: aleksis
CVE-2022-29774 (published 2022-06-21)
iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: ispyconnect
Affected products: ispy
CVE-2022-29775 (published 2022-06-21)
iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: ispyconnect
Affected products: ispy
CVE-2022-29776 (published 2022-06-02)
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: onlyoffice
Affected products: core, document_server
CVE-2022-29777 (published 2022-06-02)
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: onlyoffice
Affected products: core, document_server
CVE-2022-29778 (published 2022-06-03)
D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: dlink
Affected products: dir-890l, dir-890l_firmware
CVE-2022-29779 (published 2022-06-02)
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: nginx
Affected products: njs
CVE-2022-2978 (published 2022-08-24)
A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: debian, linux
Affected products: debian_linux, linux_kernel
CVE-2022-29780 (published 2022-06-02)
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: nginx
Affected products: njs
CVE-2022-29784 (published 2022-06-03)
PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: publiccms
Affected products: publiccms
CVE-2022-29788 (published 2022-06-02)
libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mobi file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: libmobi_project
Affected products: libmobi
CVE-2022-29789 (published 2022-05-13)
The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2022-2979 (published 2022-09-12)
Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: omron
Affected products: cx-programmer
CVE-2022-29790 (published 2022-05-13)
The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2022-29791 (published 2022-05-13)
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2022-29792 (published 2022-05-13)
The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2022-29793 (published 2022-05-13)
There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, harmonyos, magic_ui
CVE-2022-29794 (published 2022-05-13)
The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2022-29795 (published 2022-05-13)
The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2022-29796 (published 2022-05-13)
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: emui, harmonyos
CVE-2022-29797 (published 2022-06-13)
There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability may lead to privilege escalation.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: huawei
Affected products: cv81-wdm, cv81-wdm_firmware
CVE-2022-29798 (published 2022-06-13)
There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause denial of service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: huawei
Affected products: cv81-wdm, cv81-wdm_firmware
CVE-2022-29799 (published 2022-09-21)
A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: microsoft
Affected products: windows_defender_for_endpoint
CVE-2022-2980 (published 2022-08-25)
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: fedoraproject, vim
Affected products: fedora, vim
CVE-2022-29800 (published 2022-09-21)
A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-367
Affected vendors: microsoft
Affected products: windows_defender_for_endpoint
CVE-2022-29801 (published 2022-05-20)
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: siemens
Affected products: teamcenter
CVE-2022-29804 (published 2022-08-10)
Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: golang, microsoft
Affected products: go, windows
CVE-2022-29805 (published 2022-08-19)
A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitrary code via a crafted XML payload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: fishbowlinventory
Affected products: fishbowl
CVE-2022-29806 (published 2022-04-26)
ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: zoneminder
Affected products: zoneminder
CVE-2022-29807 (published 2022-08-02)
A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: quest
Affected products: kace_systems_management_appliance
CVE-2022-29808 (published 2022-08-02)
In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-330
Affected vendors: quest
Affected products: kace_systems_management_appliance
CVE-2022-2981 (published 2022-10-10)
The Download Monitor WordPress plugin before 4.5.98 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-552
Affected vendors: wpchill
Affected products: download_monitor
CVE-2022-29810 (published 2022-04-27)
The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: hashicorp
Affected products: go-getter
CVE-2022-29811 (published 2022-04-28)
In JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: jetbrains
Affected products: hub
CVE-2022-29812 (published 2022-04-28)
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-176
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2022-29813 (published 2022-04-28)
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2022-29814 (published 2022-04-28)
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2022-29815 (published 2022-04-28)
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2022-29816 (published 2022-04-28)
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N)
Weakness: CWE-74
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2022-29817 (published 2022-04-28)
In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2022-29818 (published 2022-04-28)
In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-346
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2022-29819 (published 2022-04-28)
In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2022-2982 (published 2022-08-25)
Use After Free in GitHub repository vim/vim prior to 9.0.0260.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: fedoraproject, vim
Affected products: fedora, vim
CVE-2022-29820 (published 2022-04-28)
In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-1327
Affected vendors: jetbrains
Affected products: pycharm
CVE-2022-29821 (published 2022-04-28)
In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: jetbrains
Affected products: pycharm
CVE-2022-29822 (published 2022-10-26)
Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: feathersjs
Affected products: feathers-sequelize
CVE-2022-29823 (published 2022-10-26)
Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1321
Affected vendors: feathersjs
Affected products: feathers-sequelize
CVE-2022-29824 (published 2022-05-03)
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-190
Affected vendors: debian, fedoraproject, netapp, oracle, xmlsoft
Affected products: active_iq_unified_manager, clustered_data_ontap, clustered_data_ontap_antivirus_connector, debian_linux, fedora, h300s, h300s_firmware, h410c, h410c_firmware, h410s, h410s_firmware, h500s, h500s_firmware, h700s, h700s_firmware, libxml2, libxslt, manageability_software_development_kit, ontap_select_deploy_administration_utility, smi-s_provider, snapdrive, snapmanager, solidfire_\&_hci_management_node, zfs_storage_appliance_kit
CVE-2022-29825 (published 2022-11-25)
Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-259
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-29826 (published 2022-11-25)
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-29827 (published 2022-11-25)
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project files or execute programs illegally.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-321
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-29828 (published 2022-11-25)
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project file or execute programs illegally.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-321
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-29829 (published 2022-11-25)
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, Motion Control Setting(GX Works3 related software) versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to 1.200J allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-321
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-2983 (published 2022-11-28)
The Salat Times WordPress plugin before 3.2.2 does not sanitize and escapes its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Affected vendors: salat_times_project
Affected products: salat_times
CVE-2022-29830 (published 2022-11-25)
Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.065T allows a remote unauthenticated attacker to disclose or tamper with sensitive information. As a result, unauthenticated attackers may obtain information about project files illegally.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-321
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-29831 (published 2022-11-25)
Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated attacker to obtain information about the project file for MELSEC safety CPU modules.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-259
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-29832 (published 2022-11-25)
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer versions 8.40S and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could obtain information about the project file for MELSEC safety CPU modules or project file for MELSEC Q/FX/L series with security setting.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-316
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-29833 (published 2022-11-25)
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could access to MELSEC safety CPU modules illgally.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: mitsubishielectric
Affected products: gx_works3
CVE-2022-29834 (published 2022-07-20)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1 allows a remote unauthenticated attacker to access to arbitrary files in the GENESIS64 server or ICONICS suite server and disclose information stored in the files by embedding a malicious URL parameter in the URL of the monitoring screen delivered to the GENESIS64 or ICONICS Suite mobile monitoring application and accessing the monitoring screen.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: iconics
Affected products: genesis64
CVE-2022-29835 (published 2022-09-19)
WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content. This issue affects: Western Digital WD Discovery WD Discovery Desktop App versions prior to 4.4.396 on Mac; WD Discovery Desktop App versions prior to 4.4.396 on Windows.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-328
Affected vendors: westerndigital
Affected products: wd_discovery
CVE-2022-29836 (published 2022-11-09)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability was discovered via an HTTP API on Western Digital My Cloud Home; My Cloud Home Duo; and SanDisk ibi devices that could allow an attacker to abuse certain parameters to point to random locations on the file system. This could also allow the attacker to initiate the installation of custom packages at these locations. This can only be exploited once the attacker has been authenticated to the device. This issue affects: Western Digital My Cloud Home and My Cloud Home Duo versions prior to 8.11.0-113 on Linux; SanDisk ibi versions prior to 8.11.0-113 on Linux.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-22
Affected vendors: westerndigital
Affected products: my_cloud_home, my_cloud_home_duo, my_cloud_home_duo_firmware, my_cloud_home_firmware, sandisk_ibi, sandisk_ibi_firmware
CVE-2022-29837 (published 2022-12-01)
A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: westerndigital
Affected products: my_cloud_home, my_cloud_home_duo, my_cloud_home_duo_firmware, my_cloud_home_firmware, sandisk_ibi, sandisk_ibi_firmware
CVE-2022-29838 (published 2022-12-09)
Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-287
Affected vendors: westerndigital
Affected products: my_cloud, my_cloud_dl2100, my_cloud_dl4100, my_cloud_ex2100, my_cloud_ex2_ultra, my_cloud_ex4100, my_cloud_mirror_g2, my_cloud_os, my_cloud_pr2100, my_cloud_pr4100, wd_cloud
CVE-2022-29839 (published 2022-12-09)
Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linux.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: linux, westerndigital
Affected products: linux_kernel, my_cloud, my_cloud_dl2100, my_cloud_dl4100, my_cloud_ex2100, my_cloud_ex2_ultra, my_cloud_ex4100, my_cloud_mirror_g2, my_cloud_os, my_cloud_pr2100, my_cloud_pr4100, wd_cloud
CVE-2022-2984 (published 2022-10-14)
In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: google, unisoc
Affected products: android, s8000, sc7731e, sc9832e, sc9863a, t310, t606, t610, t612, t616, t618, t760, t770, t820
CVE-2022-29840 (published 2023-05-10)
Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This issue affects My Cloud OS 5 devices before 5.26.202.



Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-918
Affected vendors: westerndigital
Affected products: my_cloud, my_cloud_dl2100, my_cloud_dl4100, my_cloud_ex2100, my_cloud_ex2_ultra, my_cloud_ex4100, my_cloud_mirror_g2, my_cloud_os, my_cloud_pr2100, my_cloud_pr4100, wd_cloud
CVE-2022-29841 (published 2023-05-10)
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that was caused by a command that read files from a privileged location and created a system command without sanitizing the read data. This command could be triggered by an attacker remotely to cause code execution and gain a reverse shell in Western Digital My Cloud OS 5 devices.This issue affects My Cloud OS 5: before 5.26.119.


Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: westerndigital
Affected products: my_cloud, my_cloud_dl2100, my_cloud_dl4100, my_cloud_ex2100, my_cloud_ex2_ultra, my_cloud_ex4100, my_cloud_mirror_g2, my_cloud_os, my_cloud_pr2100, my_cloud_pr4100, wd_cloud
CVE-2022-29842 (published 2023-05-10)
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before 5.26.119.


Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: westerndigital
Affected products: my_cloud, my_cloud_dl2100, my_cloud_dl4100, my_cloud_ex2100, my_cloud_ex2_ultra, my_cloud_ex4100, my_cloud_mirror_g2, my_cloud_os, my_cloud_pr2100, my_cloud_pr4100, wd_cloud
CVE-2022-29843 (published 2023-01-26)
A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to execute code in the context of the root user.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: westerndigital
Affected products: my_cloud_dl2100, my_cloud_dl2100_firmware, my_cloud_dl4100, my_cloud_dl4100_firmware, my_cloud_ex2100, my_cloud_ex2100_firmware, my_cloud_ex2_ultra, my_cloud_ex2_ultra_firmware, my_cloud_ex4100, my_cloud_ex4100_firmware, my_cloud_mirror_g2, my_cloud_mirror_g2_firmware, my_cloud_pr2100, my_cloud_pr2100_firmware, my_cloud_pr4100, my_cloud_pr4100_firmware
CVE-2022-29844 (published 2023-01-26)
A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119 allows an attacker to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-23
Affected vendors: westerndigital
Affected products: my_cloud_dl2100, my_cloud_dl2100_firmware, my_cloud_dl4100, my_cloud_dl4100_firmware, my_cloud_ex2100, my_cloud_ex2100_firmware, my_cloud_ex2_ultra, my_cloud_ex2_ultra_firmware, my_cloud_ex4100, my_cloud_ex4100_firmware, my_cloud_mirror_g2, my_cloud_mirror_g2_firmware, my_cloud_pr2100, my_cloud_pr2100_firmware, my_cloud_pr4100, my_cloud_pr4100_firmware
CVE-2022-29845 (published 2022-05-11)
In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the contents of a local file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-829
Affected vendors: progress
Affected products: whatsup_gold
CVE-2022-29846 (published 2022-05-11)
In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation serial number.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: progress
Affected products: whatsup_gold
CVE-2022-29847 (published 2022-05-11)
In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-918
Affected vendors: progress
Affected products: whatsup_gold
CVE-2022-29848 (published 2022-05-11)
In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attributes from a host that is accessible by the WhatsUp Gold system.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-918
Affected vendors: progress
Affected products: whatsup_gold
CVE-2022-29849 (published 2022-05-02)
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: progress
Affected products: openedge
CVE-2022-2985 (published 2022-10-14)
In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-862
Affected vendors: google, unisoc
Affected products: android, s8000, sc7731e, sc9832e, sc9863a, t310, t606, t610, t612, t616, t618, t760, t770, t820
CVE-2022-29850 (published 2022-08-26)
Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: lexmark
Affected products: b2236, b2236_firmware, b2338, b2338_firmware, b2442, b2442_firmware, b2546, b2546_firmware, b2650, b2650_firmware, b2865, b2865_firmware, b3340, b3340_firmware, b3442, b3442_firmware, c2240, c2240_firmware, c2325, c2325_firmware, c2326, c2326_firmware, c2425, c2425_firmware, c2535
CVE-2022-29851 (published 2022-10-25)
documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: open-xchange
Affected products: ox_app_suite
CVE-2022-29852 (published 2022-12-26)
OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: open-xchange
Affected products: open-xchange_appsuite
CVE-2022-29853 (published 2022-12-26)
OX App Suite through 8.2 allows XSS via a certain complex hierarchy that forces use of Show Entire Message for a huge HTML e-mail message.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: open-xchange
Affected products: open-xchange_appsuite
CVE-2022-29854 (published 2022-05-13)
A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: mitel
Affected products: 6905, 6910, 6920, 6930, 6930_sip, 6940, 6940_sip, minet_firmware
CVE-2022-29855 (published 2022-05-11)
Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 (5.1.0.8016) and earlier, and 6.0 (6.0.0.368) through 6.1 HF4 (6.1.0.165), could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: mitel
Affected products: 6865i_sip, 6865i_sip_firmware, 6867i_sip, 6867i_sip_firmware, 6869i_sip, 6869i_sip_firmware, 6873i_sip, 6873i_sip_firmware, 6905_sip, 6905_sip_firmware, 6910_sip, 6910_sip_firmware, 6920_sip, 6920_sip_firmware, 6930_sip, 6930_sip_firmware, 6940_sip, 6940_sip_firmware
CVE-2022-29856 (published 2022-04-29)
A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: automationanywhere
Affected products: automation_360
CVE-2022-29858 (published 2022-06-28)
Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-287
Affected vendors: silverstripe
Affected products: assets
CVE-2022-29859 (published 2022-04-27)
component/common/network/dhcp/dhcps.c in ambiot amb1_sdk (aka SDK for Ameba1) before 2022-03-11 mishandles data structures for DHCP packet data.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: amb1_sdk_project
Affected products: amb1_sdk
CVE-2022-2986 (published 2022-10-06)
Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: moodle
Affected products: moodle
CVE-2022-29862 (published 2022-06-16)
An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-835
Affected vendors: opcfoundation
Affected products: ua_.net_standard_stack
CVE-2022-29863 (published 2022-06-16)
OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: opcfoundation
Affected products: ua_.net_standard_stack
CVE-2022-29864 (published 2022-06-16)
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to cause a server to crash via a large number of messages that trigger Uncontrolled Resource Consumption.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: opcfoundation
Affected products: ua_.net_standard_stack
CVE-2022-29865 (published 2022-06-16)
OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: opcfoundation
Affected products: ua_.net_standard_stack
CVE-2022-29866 (published 2022-06-16)
OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that triggers Uncontrolled Resource Consumption.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: opcfoundation
Affected products: ua_.net_standard_stack
CVE-2022-29868 (published 2022-05-09)
1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: 1password
Affected products: 1password
CVE-2022-29869 (published 2022-04-28)
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-532
Affected vendors: debian, fedoraproject, samba
Affected products: cifs-utils, debian_linux, fedora
CVE-2022-2987 (published 2022-09-26)
The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it's settings (which are hooked to the init action), allowing unauthenticated attackers to update them. Attackers could set their own LDAP server to be used to authenticated users, therefore bypassing the current authentication
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-352
Affected vendors: ldap_wp_login_\/_active_directory_integration_project
Affected products: ldap_wp_login_\/_active_directory_integration
CVE-2022-29871 (published 2023-08-11)
Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: intel
Affected products: atom_x5-e3930, atom_x5-e3940, atom_x6200fe, atom_x6211e, atom_x6212re, atom_x6214re, atom_x6413e, atom_x6414re, atom_x6416re, atom_x6425e, atom_x6425re, atom_x6427fe, atom_x7-e3950, b150, b250, b360, b365, b460, b560, b660, c232, c236, c242, c246, c252
CVE-2022-29872 (published 2022-05-20)
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-141
Affected vendors: siemens
Affected products: 7kg8500-0aa00-0aa0, 7kg8500-0aa00-0aa0_firmware, 7kg8500-0aa00-2aa0, 7kg8500-0aa00-2aa0_firmware, 7kg8500-0aa10-0aa0, 7kg8500-0aa10-0aa0_firmware, 7kg8500-0aa10-2aa0, 7kg8500-0aa10-2aa0_firmware, 7kg8500-0aa30-0aa0, 7kg8500-0aa30-0aa0_firmware, 7kg8500-0aa30-2aa0, 7kg8500-0aa30-2aa0_firmware, 7kg8501-0aa01-0aa0, 7kg8501-0aa01-0aa0_firmware, 7kg8501-0aa01-2aa0, 7kg8501-0aa01-2aa0_firmware, 7kg8501-0aa02-0aa0, 7kg8501-0aa02-0aa0_firmware, 7kg8501-0aa02-2aa0, 7kg8501-0aa02-2aa0_firmware, 7kg8501-0aa11-0aa0, 7kg8501-0aa11-0aa0_firmware, 7kg8501-0aa11-2aa0, 7kg8501-0aa11-2aa0_firmware, 7kg8501-0aa12-0aa0
CVE-2022-29873 (published 2022-05-20)
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-141
Affected vendors: siemens
Affected products: 7kg8500-0aa00-0aa0, 7kg8500-0aa00-0aa0_firmware, 7kg8500-0aa00-2aa0, 7kg8500-0aa00-2aa0_firmware, 7kg8500-0aa10-0aa0, 7kg8500-0aa10-0aa0_firmware, 7kg8500-0aa10-2aa0, 7kg8500-0aa10-2aa0_firmware, 7kg8500-0aa30-0aa0, 7kg8500-0aa30-0aa0_firmware, 7kg8500-0aa30-2aa0, 7kg8500-0aa30-2aa0_firmware, 7kg8501-0aa01-0aa0, 7kg8501-0aa01-0aa0_firmware, 7kg8501-0aa01-2aa0, 7kg8501-0aa01-2aa0_firmware, 7kg8501-0aa02-0aa0, 7kg8501-0aa02-0aa0_firmware, 7kg8501-0aa02-2aa0, 7kg8501-0aa02-2aa0_firmware, 7kg8501-0aa11-0aa0, 7kg8501-0aa11-0aa0_firmware, 7kg8501-0aa11-2aa0, 7kg8501-0aa11-2aa0_firmware, 7kg8501-0aa12-0aa0
CVE-2022-29874 (published 2022-05-20)
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-319
Affected vendors: siemens
Affected products: 7kg8500-0aa00-0aa0, 7kg8500-0aa00-0aa0_firmware, 7kg8500-0aa00-2aa0, 7kg8500-0aa00-2aa0_firmware, 7kg8500-0aa10-0aa0, 7kg8500-0aa10-0aa0_firmware, 7kg8500-0aa10-2aa0, 7kg8500-0aa10-2aa0_firmware, 7kg8500-0aa30-0aa0, 7kg8500-0aa30-0aa0_firmware, 7kg8500-0aa30-2aa0, 7kg8500-0aa30-2aa0_firmware, 7kg8501-0aa01-0aa0, 7kg8501-0aa01-0aa0_firmware, 7kg8501-0aa01-2aa0, 7kg8501-0aa01-2aa0_firmware, 7kg8501-0aa02-0aa0, 7kg8501-0aa02-0aa0_firmware, 7kg8501-0aa02-2aa0, 7kg8501-0aa02-2aa0_firmware, 7kg8501-0aa11-0aa0, 7kg8501-0aa11-0aa0_firmware, 7kg8501-0aa11-2aa0, 7kg8501-0aa11-2aa0_firmware, 7kg8501-0aa12-0aa0