deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2099
Published: 2022-07-17
Description: The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-116
References: https://wpscan.com/vulnerability/0316e5f3-3302-40e3-8ff4-be3423a3be7b; https://wpscan.com/vulnerability/0316e5f3-3302-40e3-8ff4-be3423a3be7b
CVE: CVE-2022-2100
Published: 2022-07-17
Description: The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7d8b7871-baa5-4a54-a9e9-2c9d302cdd12; https://wpscan.com/vulnerability/7d8b7871-baa5-4a54-a9e9-2c9d302cdd12
CVE: CVE-2022-2114
Published: 2022-07-17
Description: The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/59911ba4-fa06-498a-9e7c-0c337cce691c; https://wpscan.com/vulnerability/59911ba4-fa06-498a-9e7c-0c337cce691c
CVE: CVE-2022-2118
Published: 2022-07-17
Description: The 404s WordPress plugin before 3.5.1 does not sanitise and escape its fields, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/9a19af60-d6e6-4fa3-82eb-3636599b814c; https://wpscan.com/vulnerability/9a19af60-d6e6-4fa3-82eb-3636599b814c
CVE: CVE-2022-2133
Published: 2022-07-17
Description: The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://wpscan.com/vulnerability/e76939ca-180f-4472-a26a-e0c36cfd32de; https://wpscan.com/vulnerability/e76939ca-180f-4472-a26a-e0c36cfd32de
CVE: CVE-2022-2144
Published: 2022-07-17
Description: The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like default_role, users_can_register via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/419054d4-95e8-4f4a-b864-a98b3e18435a; https://wpscan.com/vulnerability/419054d4-95e8-4f4a-b864-a98b3e18435a
CVE: CVE-2022-2146
Published: 2022-07-17
Description: The Import CSV Files WordPress plugin through 1.0 does not sanitise and escaped imported data before outputting them back in a page, and is lacking CSRF check when performing such action as well, resulting in a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/adc1d752-331e-44af-b5dc-b463d56c2cb4; https://wpscan.com/vulnerability/adc1d752-331e-44af-b5dc-b463d56c2cb4
CVE: CVE-2022-2148
Published: 2022-07-17
Description: The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/92214311-da6d-49a8-95c9-86f47635264f; https://wpscan.com/vulnerability/92214311-da6d-49a8-95c9-86f47635264f
CVE: CVE-2022-2149
Published: 2022-07-17
Description: The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/40191e87-8648-47ef-add0-d7180e8ffe13; https://wpscan.com/vulnerability/40191e87-8648-47ef-add0-d7180e8ffe13
CVE: CVE-2022-2151
Published: 2022-07-17
Description: The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7c08e4c1-57c5-471c-a990-dcb9fd7ce0f4; https://wpscan.com/vulnerability/7c08e4c1-57c5-471c-a990-dcb9fd7ce0f4
CVE: CVE-2022-2168
Published: 2022-07-17
Description: The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/66789b32-049e-4440-8b19[PII_REDACTED]10; https://wpscan.com/vulnerability/66789b32-049e-4440-8b19[PII_REDACTED]10
CVE: CVE-2022-2169
Published: 2022-07-17
Description: The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a9f4aab7-b42b-4bb6-b05d-05407f935230; https://wpscan.com/vulnerability/a9f4aab7-b42b-4bb6-b05d-05407f935230
CVE: CVE-2022-2173
Published: 2022-07-17
Description: The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/86bfe0cc-a579-43d6-a26b-6e06000251f6; https://wpscan.com/vulnerability/86bfe0cc-a579-43d6-a26b-6e06000251f6
CVE: CVE-2022-2186
Published: 2022-07-17
Description: The Simple Post Notes WordPress plugin before 1.7.6 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b766103a-7f91-4d91-9f9c-bff4bfd53f57; https://wpscan.com/vulnerability/b766103a-7f91-4d91-9f9c-bff4bfd53f57
CVE: CVE-2022-2187
Published: 2022-07-17
Description: The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4fd2f1ef-39c6-4425-8b4d-1a332dabac8d; https://wpscan.com/vulnerability/4fd2f1ef-39c6-4425-8b4d-1a332dabac8d
CVE: CVE-2022-2194
Published: 2022-07-17
Description: The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ecf4b707-dea9-42d0-9ade-d788a9f97190; https://wpscan.com/vulnerability/ecf4b707-dea9-42d0-9ade-d788a9f97190
CVE: CVE-2022-2222
Published: 2022-07-17
Description: The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-552
References: https://wpscan.com/vulnerability/dd48624a-1781-419c-a3c4-1e3eaf5e2c1b; https://wpscan.com/vulnerability/dd48624a-1781-419c-a3c4-1e3eaf5e2c1b
CVE: CVE-2022-32320
Published: 2022-07-17
Description: A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read files via an uploaded file such as a settings/preferences file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://getferdi.com/; https://gist.github.com/omriinbar-cyesec/c1179fe99725d2b828b6573c0d110c9c; https://github.com/getferdi/ferdi
CVE: CVE-2022-35861
Published: 2022-07-17
Description: pyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a .python-version file in the current working directory. An attacker can craft a Python version string in .python-version to execute shims under their control. (Shims are executables that pass a command along to a specific version of pyenv. The version string is used to construct the path to the command, and there is no validation of whether the version specified is a valid version. Thus, relative path traversal can occur.)
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://github.com/pyenv/pyenv/commit/22fa683571d98b59ea16e5fe48ac411c67939653; https://github.com/pyenv/pyenv/commit/22fa683571d98b59ea16e5fe48ac411c67939653
CVE: CVE-2022-30550
Published: 2022-07-17
Description: An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args settings, incorrect username_filter and mechanism settings can be applied to passdb definitions. These incorrectly applied settings can lead to an unintended security configuration and can permit privilege escalation in certain configurations. The documentation does not advise against the use of passdb definitions that have the same driver and args settings. One such configuration would be where an administrator wishes to use the same PAM configuration or passwd file for both normal and master users but use the username_filter setting to restrict which of the users is able to be a master user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://dovecot.org/security; https://lists.debian.org/debian-lts-announce/2022/09/msg00032.html; https://security.gentoo.org/glsa/202310-19
CVE: CVE-2022-31260
Published: 2022-07-17
Description: In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://github.com/grymer/CVE/blob/master/CVE-2022-31260.md; https://www.resourcespace.com; https://github.com/grymer/CVE/blob/master/CVE-2022-31260.md
CVE: CVE-2022-25357
Published: 2022-07-17
Description: Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if it has a lock but not a PIN.
CVSS Score: 5.3 (MEDIUM)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-25357; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-25357
CVE: CVE-2022-26654
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26654; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26654
CVE: CVE-2022-26655
Published: 2022-07-17
Description: Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a software abort via a gateway call into Teams.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26655; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26655
CVE: CVE-2022-26656
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join.
CVSS Score: 8.2 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26656; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-26656
CVE: CVE-2022-26657
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2022-27928
Published: 2022-07-17
Description: Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27928; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27928
CVE: CVE-2022-27929
Published: 2022-07-17
Description: Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27929; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27929
CVE: CVE-2022-27930
Published: 2022-07-17
Description: Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed.
CVSS Score: 5.9 (MEDIUM)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27930; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27930
CVE: CVE-2022-27931
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27931; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27931
CVE: CVE-2022-27932
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27932; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27932
CVE: CVE-2022-27933
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
CVSS Score: 8.2 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27933; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27933
CVE: CVE-2022-27934
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27934; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27934
CVE: CVE-2022-27935
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27935; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27935
CVE: CVE-2022-27936
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27936; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27936
CVE: CVE-2022-27937
Published: 2022-07-17
Description: Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27937; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27937
CVE: CVE-2022-30622
Published: 2022-07-17
Description: Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be possible to enter the system. Path access: http://api/sys_username_passwd.cmd - The server loads the request clearly by default. Disclosure of hard-coded credit information within the JS code sent to the customer within the Login.js file is a strong user (which is not documented) and also the password, which allow for super-user access. Username: chcadmin, [CREDENTIAL_REDACTED].
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-798
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2021-40149
Published: 2022-07-17
Description: The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-552
References: http://packetstormsecurity.com/files/167407/Reolink-E1-Zoom-Camera-3.0.0.716-Private-Key-Disclosure.html; http://seclists.org/fulldisclosure/2022/Jun/0; https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2021-40149.txt
CVE: CVE-2021-46784
Published: 2022-07-17
Description: In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://www.openwall.com/lists/oss-security/2023/10/13/1; http://www.openwall.com/lists/oss-security/2023/10/13/10; http://www.openwall.com/lists/oss-security/2023/10/21/1
CVE: CVE-2022-26352
Published: 2022-07-17
Description: An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal, in which the file is saved outside of the intended storage location. If anonymous content creation is enabled, this allows an unauthenticated attacker to upload an executable file, such as a .jsp file, that can lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/167365/dotCMS-Shell-Upload.html; https://groups.google.com/g/dotcms; http://packetstormsecurity.com/files/167365/dotCMS-Shell-Upload.html
CVE: CVE-2022-29286
Published: 2022-07-17
Description: Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-29286; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-29286
CVE: CVE-2022-32263
Published: 2022-07-17
Description: Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.
CVSS Score: 7.5 (HIGH)
References: https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-32263; https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-32263
CVE: CVE-2021-40150
Published: 2022-07-17
Description: The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2021-40150.txt; https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2021-40150.txt
CVE: CVE-2022-26479
Published: 2022-07-17
Description: An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor) causes all API calls to execute as admin without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://sec-consult.com/de/vulnerability-lab/advisory/poly-eagleeye-director-ii-kritische-schwachstellen/; https://sec-consult.com/vulnerability-lab/advisory/critical-vulnerabilities-poly-eagleeye-director-ii/; https://www.poly.com/us/en/support/security-center
CVE: CVE-2022-26481
Published: 2022-07-17
Description: An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://sec-consult.com/vulnerability-lab/advisory/authenticated-command-injection-in-poly-studio/; https://www.poly.com/us/en/support/security-center; https://sec-consult.com/vulnerability-lab/advisory/authenticated-command-injection-in-poly-studio/
CVE: CVE-2022-26482
Published: 2022-07-17
Description: An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://sec-consult.com/de/vulnerability-lab/advisory/poly-eagleeye-director-ii-kritische-schwachstellen/; https://sec-consult.com/vulnerability-lab/advisory/critical-vulnerabilities-poly-eagleeye-director-ii/; https://www.poly.com/us/en/support/security-center
CVE: CVE-2022-28807
Published: 2022-07-17
Description: An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's opened in the recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2022-28808
Published: 2022-07-17
Description: An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading DWG files in a recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2022-28809
Published: 2022-07-17
Description: An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2022-30981
Published: 2022-07-17
Description: An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deserialize arbitrary data and hence can potentially achieve Java code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilies-in-gentics-cms/; https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilies-in-gentics-cms/
CVE: CVE-2022-30982
Published: 2022-07-17
Description: An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the username.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilies-in-gentics-cms/; https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilies-in-gentics-cms/
CVE: CVE-2022-31201
Published: 2022-07-17
Description: SoftGuard Web (SGW) before 5.1.5 allows HTML injection.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-softguard-network-management-extension-snmp/; https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-softguard-network-management-extension-snmp/
CVE: CVE-2022-31202
Published: 2022-07-17
Description: The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via export or man.tcl.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-softguard-network-management-extension-snmp/; https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-softguard-network-management-extension-snmp/