alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-31357 (published 2022-06-17)
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: online_ordering_system_project
Affected products: online_ordering_system
CVE-2022-31358 (published 2022-12-14)
A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-79
Affected vendors: proxmox
Affected products: virtual_environment
CVE-2022-3136 (published 2022-10-10)
The Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: wpsocialrocket
Affected products: social_rocket
CVE-2022-31361 (published 2022-06-23)
Docebo Community Edition v4.0.5 and below was discovered to contain a SQL injection vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: docebo
Affected products: docebo
CVE-2022-31362 (published 2022-06-23)
Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: docebo
Affected products: docebo
CVE-2022-31363 (published 2023-02-01)
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is pb_transport_handle_frag_. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered during mesh provisioning. Because there is no check for mismatched SegN and TotalLength in Transaction Start PDU.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: infineon
Affected products: cypress_bluetooth_mesh_software_development_kit
CVE-2022-31364 (published 2023-02-01)
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is lower_transport_layer_on_seg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered by sending a series of segmented packets with inconsistent SegN.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: infineon
Affected products: cypress_bluetooth_mesh_software_development_kit
CVE-2022-31366 (published 2022-10-20)
An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: eve-ng
Affected products: eve-ng
CVE-2022-31367 (published 2022-09-27)
Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: strapi
Affected products: strapi
CVE-2022-3137 (published 2022-10-10)
The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any authenticated user (such as subscriber) creating a task to perform Stored Cross-Site Scripting by attaching a malicious SVG file
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: taskbuilder
Affected products: taskbuilder
CVE-2022-31372 (published 2022-06-16)
Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: wiris
Affected products: mathtype
CVE-2022-31373 (published 2022-06-21)
SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: contec
Affected products: sv-cpt-mc310, sv-cpt-mc310_firmware
CVE-2022-31374 (published 2022-06-21)
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: contec
Affected products: sv-cpt-mc310, sv-cpt-mc310_firmware
CVE-2022-3138 (published 2022-09-08)
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: diagrams
Affected products: drawio
CVE-2022-31382 (published 2022-06-16)
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: phpgurukul
Affected products: directory_management_system
CVE-2022-31383 (published 2022-06-16)
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: phpgurukul
Affected products: directory_management_system
CVE-2022-31384 (published 2022-06-16)
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: phpgurukul
Affected products: directory_management_system
CVE-2022-31386 (published 2022-06-09)
A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-918
Affected vendors: nbnbk_project
Affected products: nbnbk
CVE-2022-3139 (published 2022-10-17)
The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: designextreme
Affected products: we\'re_open
CVE-2022-31390 (published 2022-06-09)
Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-918
Affected vendors: jizhicms
Affected products: jizhicms
CVE-2022-31393 (published 2022-06-09)
Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-918
Affected vendors: jizhicms
Affected products: jizhicms
CVE-2022-31394 (published 2023-02-21)
Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: hyper
Affected products: hyper
CVE-2022-31395 (published 2022-06-23)
Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: algosolutions
Affected products: 8373_ip_zone_paging_adapter, 8373_ip_zone_paging_adapter_firmware
CVE-2022-31398 (published 2022-06-13)
A cross-site scripting (XSS) vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: helpdeskz
Affected products: helpdeskz
CVE-2022-3140 (published 2022-10-11)
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.1; 7.3 versions prior to 7.3.6.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
Weakness: CWE-20
Affected vendors: debian, fedoraproject, libreoffice
Affected products: debian_linux, fedora, libreoffice
CVE-2022-31400 (published 2022-06-13)
A cross-site scripting (XSS) vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: helpdeskz
Affected products: helpdeskz
CVE-2022-31402 (published 2022-06-10)
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: combodo
Affected products: itop
CVE-2022-31403 (published 2022-06-14)
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: combodo
Affected products: itop
CVE-2022-31405 (published 2023-02-27)
MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: mv_idigital_clinic_enterprise_project
Affected products: mv_idigital_clinic_enterprise
CVE-2022-3141 (published 2022-09-19)
The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: cozmoslabs
Affected products: translatepress
CVE-2022-31414 (published 2022-09-07)
D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: dlink
Affected products: dir-1960, dir-1960_firmware
CVE-2022-31415 (published 2022-06-14)
Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: online_fire_reporting_system_project
Affected products: online_fire_reporting_system
CVE-2022-3142 (published 2022-09-19)
The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. The attack can be executed by anyone who is permitted to view the forms statistics chart, by default administrators, however can be configured otherwise via the plugin settings.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: basixonline
Affected products: nex-forms
CVE-2022-3143 (published 2023-01-13)
wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead. This flaw allows an attacker to access secure information or impersonate an authed user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-203
Affected vendors: redhat
Affected products: jboss_enterprise_application_platform, wildfly_elytron
CVE-2022-3144 (published 2022-09-23)
The Wordfence Security – Firewall & Malware Scan plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 7.6.0 via a setting on the options page due to insufficient escaping on the stored value. This makes it possible for authenticated users, with administrative privileges, to inject malicious web scripts into the setting that executes whenever a user accesses a page displaying the affected setting on sites running a vulnerable version.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: wordfence
Affected products: wordfence_security
CVE-2022-31446 (published 2022-06-14)
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: tendacn
Affected products: ac18, ac18_firmware
CVE-2022-31447 (published 2022-06-14)
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: magicpin
Affected products: magicpin
CVE-2022-3145 (published 2023-01-12)
An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)
Weakness: CWE-601
Affected vendors: okta
Affected products: oidc_middleware
CVE-2022-31454 (published 2023-07-28)
Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this is disputed by the vendor because the cve-2022-31454-8e8555c31fd3 page does not describe why /books has a relationship to Yii 2.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: yiiframework
Affected products: yii
CVE-2022-31455 (published 2023-07-26)
* A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: truedesk
Affected products: truedesk
CVE-2022-31456 (published 2023-07-26)
A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: truedesk
Affected products: truedesk
CVE-2022-31457 (published 2023-07-25)
RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: rtx_trap_project
Affected products: rtx_trap
CVE-2022-31458 (published 2023-07-25)
RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-116
Affected vendors: rtx_trap_project
Affected products: rtx_trap
CVE-2022-31459 (published 2022-06-02)
Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-326
Affected vendors: owllabs
Affected products: meeting_owl_pro, meeting_owl_pro_firmware
CVE-2022-3146 (published 2023-03-23)
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: openstack, redhat
Affected products: openstack, openstack_for_ibm_power, tripleo_ansible
CVE-2022-31460 (published 2022-06-02)
Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)
Weakness: CWE-798
Affected vendors: owllabs
Affected products: meeting_owl_pro, meeting_owl_pro_firmware
CVE-2022-31461 (published 2022-06-02)
Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-306
Affected vendors: owllabs
Affected products: meeting_owl_pro, meeting_owl_pro_firmware
CVE-2022-31462 (published 2022-06-02)
Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: owllabs
Affected products: meeting_owl_pro, meeting_owl_pro_firmware
CVE-2022-31463 (published 2022-06-02)
Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Weakness: CWE-287
Affected vendors: owllabs
Affected products: meeting_owl_pro, meeting_owl_pro_firmware
CVE-2022-31464 (published 2022-06-16)
Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: adaware
Affected products: protect
CVE-2022-31465 (published 2022-06-14)
A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Designer VX.2.12 (All versions < VX.2.12 Update 5), Xpedition Designer VX.2.13 (All versions < VX.2.13 Update 1). The affected application assigns improper access rights to the service executable. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: siemens
Affected products: xpedition_designer
CVE-2022-31466 (published 2022-05-23)
Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-59
Affected vendors: quickheal
Affected products: total_security
CVE-2022-31467 (published 2022-05-23)
A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature of the DLLs it tries to load.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: quickheal
Affected products: total_security
CVE-2022-31468 (published 2022-10-25)
OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: open-xchange
Affected products: ox_app_suite
CVE-2022-31469 (published 2022-12-26)
OX App Suite through 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /#!!&app=%2e./ URI.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: open-xchange
Affected products: open-xchange_appsuite
CVE-2022-3147 (published 2022-09-09)
Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: mattermost
Affected products: mattermost_server
CVE-2022-31470 (published 2022-06-07)
An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: axigen
Affected products: axigen_mobile_webmail
CVE-2022-31471 (published 2022-07-26)
untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: untangle_project
Affected products: untangle
CVE-2022-31472 (published 2022-07-11)
Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: cybozu
Affected products: garoon
CVE-2022-31473 (published 2022-08-04)
In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: f5
Affected products: big-ip_access_policy_manager
CVE-2022-31474 (published 2023-03-13)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: ithemes
Affected products: backupbuddy
CVE-2022-31475 (published 2022-07-21)
Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: givewp
Affected products: givewp
CVE-2022-31476 (published 2023-02-16)
Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: system_usage_report
CVE-2022-31477 (published 2023-05-10)
Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-665
Affected vendors: intel
Affected products: cm11ebc4w, cm11ebc4w_firmware, cm11ebi38w, cm11ebi38w_firmware, cm11ebi58w, cm11ebi58w_firmware, cm11ebi716w, cm11ebi716w_firmware, lapbc510, lapbc510_firmware, lapbc710, lapbc710_firmware, lapkc51e, lapkc51e_firmware, lapkc71e, lapkc71e_firmware, lapkc71f, lapkc71f_firmware, nuc11btmi7, nuc11btmi7_firmware, nuc11btmi9, nuc11btmi9_firmware, nuc11dbbi7, nuc11dbbi7_firmware, nuc11dbbi9
CVE-2022-31478 (published 2022-06-21)
The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: sr.solutions
Affected products: usertakeover
CVE-2022-31479 (published 2022-06-06)
An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable. The injected commands only get executed during start up or when unsafe calls regarding the hostname are used. This allows the attacker to gain remote access to the device and can make their persistence permanent by modifying the filesystem.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-693
Affected vendors: carrier, hidglobal
Affected products: ep4502, ep4502_firmware, lenels2_lnl-4420, lenels2_lnl-4420_firmware, lenels2_lnl-x2210, lenels2_lnl-x2210_firmware, lenels2_lnl-x2220, lenels2_lnl-x2220_firmware, lenels2_lnl-x3300, lenels2_lnl-x3300_firmware, lenels2_lnl-x4420, lenels2_lnl-x4420_firmware, lenels2_s2-lp-1501, lenels2_s2-lp-1501_firmware, lenels2_s2-lp-1502, lenels2_s2-lp-1502_firmware, lenels2_s2-lp-2500, lenels2_s2-lp-2500_firmware, lenels2_s2-lp-4502, lenels2_s2-lp-4502_firmware, lp1501, lp1501_firmware, lp1502, lp1502_firmware, lp2500
CVE-2022-3148 (published 2022-09-08)
Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: diagrams
Affected products: drawio
CVE-2022-31480 (published 2022-06-06)
An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The attacker needs to have a properly signed and encrypted binary, loading the firmware to the device ultimately triggers a reboot.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-425
Affected vendors: carrier, hidglobal
Affected products: ep4502, ep4502_firmware, lenels2_lnl-4420, lenels2_lnl-4420_firmware, lenels2_lnl-x2210, lenels2_lnl-x2210_firmware, lenels2_lnl-x2220, lenels2_lnl-x2220_firmware, lenels2_lnl-x3300, lenels2_lnl-x3300_firmware, lenels2_lnl-x4420, lenels2_lnl-x4420_firmware, lenels2_s2-lp-1501, lenels2_s2-lp-1501_firmware, lenels2_s2-lp-1502, lenels2_s2-lp-1502_firmware, lenels2_s2-lp-2500, lenels2_s2-lp-2500_firmware, lenels2_s2-lp-4502, lenels2_s2-lp-4502_firmware, lp1501, lp1501_firmware, lp1502, lp1502_firmware, lp2500
CVE-2022-31481 (published 2022-06-06)
An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The overflowed data can allow the attacker to manipulate the “normal” code execution to that of their choosing. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: carrier, hidglobal
Affected products: ep4502, ep4502_firmware, lenels2_lnl-4420, lenels2_lnl-4420_firmware, lenels2_lnl-x2210, lenels2_lnl-x2210_firmware, lenels2_lnl-x2220, lenels2_lnl-x2220_firmware, lenels2_lnl-x3300, lenels2_lnl-x3300_firmware, lenels2_lnl-x4420, lenels2_lnl-x4420_firmware, lenels2_s2-lp-1501, lenels2_s2-lp-1501_firmware, lenels2_s2-lp-1502, lenels2_s2-lp-1502_firmware, lenels2_s2-lp-2500, lenels2_s2-lp-2500_firmware, lenels2_s2-lp-4502, lenels2_s2-lp-4502_firmware, lp1501, lp1501_firmware, lp1502, lp1502_firmware, lp2500
CVE-2022-31482 (published 2022-06-06)
An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The overflowed data leads to segmentation fault and ultimately a denial-of-service condition, causing the device to reboot. The impact of this vulnerability is that an unauthenticated attacker could leverage this flaw to cause the target device to become unresponsive. An attacker could automate this attack to achieve persistent DoS, effectively rendering the target controller useless.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: carrier, hidglobal
Affected products: ep4502, ep4502_firmware, lenels2_lnl-4420, lenels2_lnl-4420_firmware, lenels2_lnl-x2210, lenels2_lnl-x2210_firmware, lenels2_lnl-x2220, lenels2_lnl-x2220_firmware, lenels2_lnl-x3300, lenels2_lnl-x3300_firmware, lenels2_lnl-x4420, lenels2_lnl-x4420_firmware, lenels2_s2-lp-1501, lenels2_s2-lp-1501_firmware, lenels2_s2-lp-1502, lenels2_s2-lp-1502_firmware, lenels2_s2-lp-2500, lenels2_s2-lp-2500_firmware, lenels2_s2-lp-4502, lenels2_s2-lp-4502_firmware, lp1501, lp1501_firmware, lp1502, lp1502_firmware, lp2500
CVE-2022-31483 (published 2022-06-06)
An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.271. This allows a malicious actor to overwrite sensitive system files and install a startup service to gain remote access to the underlaying Linux operating system with root privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: carrier, hidglobal
Affected products: ep4502, ep4502_firmware, lenels2_lnl-4420, lenels2_lnl-4420_firmware, lenels2_lnl-x2210, lenels2_lnl-x2210_firmware, lenels2_lnl-x2220, lenels2_lnl-x2220_firmware, lenels2_lnl-x3300, lenels2_lnl-x3300_firmware, lenels2_lnl-x4420, lenels2_lnl-x4420_firmware, lenels2_s2-lp-1501, lenels2_s2-lp-1501_firmware, lenels2_s2-lp-1502, lenels2_s2-lp-1502_firmware, lenels2_s2-lp-2500, lenels2_s2-lp-2500_firmware, lenels2_s2-lp-4502, lenels2_s2-lp-4502_firmware, lp1501, lp1501_firmware, lp1502, lp1502_firmware, lp2500
CVE-2022-31484 (published 2022-06-06)
An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The impact of this vulnerability is that an unauthenticated attacker could restrict access to the web interface to legitimate users and potentially requiring them to use the default user dip switch procedure to gain access back.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-425
Affected vendors: carrier, hidglobal
Affected products: ep4502, ep4502_firmware, lenels2_lnl-4420, lenels2_lnl-4420_firmware, lenels2_lnl-x2210, lenels2_lnl-x2210_firmware, lenels2_lnl-x2220, lenels2_lnl-x2220_firmware, lenels2_lnl-x3300, lenels2_lnl-x3300_firmware, lenels2_lnl-x4420, lenels2_lnl-x4420_firmware, lenels2_s2-lp-1501, lenels2_s2-lp-1501_firmware, lenels2_s2-lp-1502, lenels2_s2-lp-1502_firmware, lenels2_s2-lp-2500, lenels2_s2-lp-2500_firmware, lenels2_s2-lp-4502, lenels2_s2-lp-4502_firmware, lp1501, lp1501_firmware, lp1502, lp1502_firmware, lp2500
CVE-2022-31485 (published 2022-06-06)
An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-425
Affected vendors: carrier, hidglobal
Affected products: ep4502, ep4502_firmware, lenels2_lnl-4420, lenels2_lnl-4420_firmware, lenels2_lnl-x2210, lenels2_lnl-x2210_firmware, lenels2_lnl-x2220, lenels2_lnl-x2220_firmware, lenels2_lnl-x3300, lenels2_lnl-x3300_firmware, lenels2_lnl-x4420, lenels2_lnl-x4420_firmware, lenels2_s2-lp-1501, lenels2_s2-lp-1501_firmware, lenels2_s2-lp-1502, lenels2_s2-lp-1502_firmware, lenels2_s2-lp-2500, lenels2_s2-lp-2500_firmware, lenels2_s2-lp-4502, lenels2_s2-lp-4502_firmware, lp1501, lp1501_firmware, lp1502, lp1502_firmware, lp2500
CVE-2022-31486 (published 2022-06-06)
An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303 for the LP series and 1.297 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: carrier, hidglobal
Affected products: ep4502, ep4502_firmware, lenels2_lnl-4420, lenels2_lnl-4420_firmware, lenels2_lnl-x2210, lenels2_lnl-x2210_firmware, lenels2_lnl-x2220, lenels2_lnl-x2220_firmware, lenels2_lnl-x3300, lenels2_lnl-x3300_firmware, lenels2_lnl-x4420, lenels2_lnl-x4420_firmware, lenels2_s2-lp-1501, lenels2_s2-lp-1501_firmware, lenels2_s2-lp-1502, lenels2_s2-lp-1502_firmware, lenels2_s2-lp-2500, lenels2_s2-lp-2500_firmware, lenels2_s2-lp-4502, lenels2_s2-lp-4502_firmware, lp1501, lp1501_firmware, lp1502, lp1502_firmware, lp2500
CVE-2022-31487 (published 2022-05-23)
Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL injection.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: inoutscripts
Affected products: blockchain_altexchanger, blockchain_fiatexchanger
CVE-2022-31488 (published 2022-05-23)
Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: inoutscripts
Affected products: blockchain_altexchanger
CVE-2022-31489 (published 2022-05-23)
Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: inoutscripts
Affected products: blockchain_altexchanger
CVE-2022-3149 (published 2022-10-17)
The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors, which could allow attackers to made a logged in admin perform such actions via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping in some of the cursor options, it could also lead to Stored Cross-Site Scripting
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: wp_custom_cursors_project
Affected products: wp_custom_cursors
CVE-2022-31492 (published 2022-06-06)
Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: librehealth
Affected products: librehealth_ehr
CVE-2022-31493 (published 2022-06-06)
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: librehealth
Affected products: librehealth_ehr
CVE-2022-31494 (published 2022-06-06)
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: librehealth
Affected products: librehealth_ehr
CVE-2022-31495 (published 2022-06-07)
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: librehealth
Affected products: librehealth_ehr
CVE-2022-31496 (published 2022-06-09)
LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: librehealth
Affected products: librehealth_ehr
CVE-2022-31497 (published 2022-06-08)
LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: librehealth
Affected products: librehealth_ehr
CVE-2022-31498 (published 2022-06-06)
LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: librehealth
Affected products: librehealth_ehr
CVE-2022-31499 (published 2022-08-25)
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: nortekcontrol
Affected products: emerge_e3, emerge_e3_firmware
CVE-2022-3150 (published 2022-10-17)
The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privileged users such as admin
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: wp_custom_cursors_project
Affected products: wp_custom_cursors
CVE-2022-31500 (published 2022-06-02)
In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: knime
Affected products: knime_analytics_platform
CVE-2022-31501 (published 2022-07-11)
The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: onyxforum_project
Affected products: onyxforum
CVE-2022-31502 (published 2022-07-11)
The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: wormnest_project
Affected products: wormnest
CVE-2022-31503 (published 2022-07-11)
The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: orchest
Affected products: orchest
CVE-2022-31504 (published 2022-07-11)
The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: baiduwenkuspider_flaskweb_project
Affected products: baiduwenkuspider_flaskweb
CVE-2022-31505 (published 2022-07-11)
The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: mercadoenlineaback_project
Affected products: mercadoenlineaback
CVE-2022-31506 (published 2022-07-11)
The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: cmu
Affected products: opendiamond
CVE-2022-31507 (published 2022-07-11)
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: ganga_project
Affected products: ganga
CVE-2022-31508 (published 2022-07-11)
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: idayrus
Affected products: e-voting
CVE-2022-31509 (published 2022-07-11)
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: iedadata
Affected products: usap-dc_web_submission_and_dataset_search
CVE-2022-3151 (published 2022-10-17)
The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Weakness: CWE-352
Affected vendors: wp_custom_cursors_project
Affected products: wp_custom_cursors
CVE-2022-31510 (published 2022-07-11)
The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: simple-rat_project
Affected products: simple-rat
CVE-2022-31511 (published 2022-07-11)
The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: equanimity_project
Affected products: equanimity
CVE-2022-31512 (published 2022-07-11)
The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: flask-mvc_project
Affected products: flask-mvc
CVE-2022-31513 (published 2022-07-11)
The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: krypton_project
Affected products: krypton
CVE-2022-31514 (published 2022-07-11)
The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: fan_platform_project
Affected products: fan_platform
CVE-2022-31515 (published 2022-07-11)
The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: carceresbe_project
Affected products: carceresbe
CVE-2022-31516 (published 2022-07-11)
The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: harveyzyh_python_project
Affected products: harveyzyh_python
CVE-2022-31517 (published 2022-07-11)
The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L)
Weakness: CWE-22
Affected vendors: mercury_sample_manager_project
Affected products: mercury_sample_manager