deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2152
Published: 2022-08-15
Description: The Duplicate Page and Post WordPress plugin before 2.8 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e972e2c5-0d56-4d2a-81cc-2b0dff750124; https://wpscan.com/vulnerability/e972e2c5-0d56-4d2a-81cc-2b0dff750124
CVE: CVE-2022-2180
Published: 2022-08-15
Description: The GREYD.SUITE WordPress theme does not properly validate uploaded custom font packages, and does not perform any authorization or csrf checks, allowing an unauthenticated attacker to upload arbitrary files including php source files, leading to possible remote code execution (RCE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://wpscan.com/vulnerability/c330f92b-1e21-414f-b316-d5e97cb62bd1; https://wpscan.com/vulnerability/c330f92b-1e21-414f-b316-d5e97cb62bd1
CVE: CVE-2022-2314
Published: 2022-08-15
Description: The VR Calendar WordPress plugin through 2.3.2 lets any user execute arbitrary PHP functions on the site.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82; https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82
CVE: CVE-2022-2354
Published: 2022-08-15
Description: The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.
CVSS Score: 7.2 (HIGH)
CWE: CWE-863
References: https://wpscan.com/vulnerability/1c8c5861-ce87-4813-9e26-470d63c1903a; https://wpscan.com/vulnerability/1c8c5861-ce87-4813-9e26-470d63c1903a
CVE: CVE-2022-2378
Published: 2022-08-15
Description: The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3f4e8fe5-1c92-49ad-b709-a40749c80596; https://wpscan.com/vulnerability/3f4e8fe5-1c92-49ad-b709-a40749c80596
CVE: CVE-2022-2379
Published: 2022-08-15
Description: The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated users to retrieve information related to the courses, exams, departments as well as student's grades and PII such as email address, physical address, phone number etc
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6; https://wpscan.com/vulnerability/0773ba24-212e-41d5-9ae0-1416ea2c9db6
CVE: CVE-2022-2381
Published: 2022-08-15
Description: The E Unlocked - Student Result WordPress plugin through 1.0.4 is lacking CSRF and validation when uploading the School logo, which could allow attackers to make a logged in admin upload arbitrary files, such as PHP via a CSRF attack
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/c39c41bf-f622-4239-a0a1-4dfe0e079f7f; https://wpscan.com/vulnerability/c39c41bf-f622-4239-a0a1-4dfe0e079f7f
CVE: CVE-2022-2384
Published: 2022-08-15
Description: The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0917b964-f347-487e-b8d7-c4f09c290fe5; https://wpscan.com/vulnerability/0917b964-f347-487e-b8d7-c4f09c290fe5
CVE: CVE-2022-2535
Published: 2022-08-15
Description: The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://wpscan.com/vulnerability/0e13c375-044c-4c2e-ab8e-48cb89d90d02; https://wpscan.com/vulnerability/0e13c375-044c-4c2e-ab8e-48cb89d90d02
CVE: CVE-2022-2811
Published: 2022-08-15
Description: A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unknown part of the file myform.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206397 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://s1.ax1x.com/2022/08/13/vtDEFO.png; https://vuldb.com/?id.206397; https://s1.ax1x.com/2022/08/13/vtDEFO.png
CVE: CVE-2022-2812
Published: 2022-08-15
Description: A vulnerability classified as critical was found in SourceCodester Guest Management System. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-206398 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://s1.ax1x.com/2022/08/13/vtDVYD.png; https://vuldb.com/?id.206398; https://s1.ax1x.com/2022/08/13/vtDVYD.png
CVE: CVE-2022-2813
Published: 2022-08-15
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is an unknown function. The manipulation leads to cleartext storage of passwords in the database. The identifier of this vulnerability is VDB-206400.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: https://vuldb.com/?id.206400; https://vuldb.com/?id.206400
CVE: CVE-2022-2814
Published: 2022-08-15
Description: A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /mkshope/login.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206401 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://s1.ax1x.com/2022/08/13/vNcnHA.png; https://vuldb.com/?id.206401; https://s1.ax1x.com/2022/08/13/vNcnHA.png
CVE: CVE-2022-2818
Published: 2022-08-15
Description: Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-212, CWE-212
References: https://github.com/cockpit-hq/cockpit/commit/4bee1b903ee20818f4a8ecb9d974b9536cc54cb4; https://huntr.dev/bounties/ee27e5df-516b-4cf4-9f28-346d907b5491; https://github.com/cockpit-hq/cockpit/commit/4bee1b903ee20818f4a8ecb9d974b9536cc54cb4
CVE: CVE-2022-2819
Published: 2022-08-15
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://github.com/vim/vim/commit/d1d8f6bacb489036d0fd479c9dd3c0102c988889; https://huntr.dev/bounties/0a9bd71e-66b8-4eb1-9566-7dfd9b097e59; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHFAR6OY6G77M6GXCJT75A4KITLNR6GO/
CVE: CVE-2022-2820
Published: 2022-08-15
Description: Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2.
CVSS Score: 7.0 (HIGH)
CWE: CWE-384, CWE-384
References: https://github.com/namelessmc/nameless/commit/469bebc17855720e43f0c8209c88a57d2b55f6de; https://huntr.dev/bounties/df06b7d7-6077-43a5-bd81-3cc66f0d4d19; https://github.com/namelessmc/nameless/commit/469bebc17855720e43f0c8209c88a57d2b55f6de
CVE: CVE-2022-2821
Published: 2022-08-15
Description: Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-304
References: https://github.com/namelessmc/nameless/commit/98fe4b7fce5509e49e71f1357118db887b8b88e0; https://huntr.dev/bounties/c216db15-fe2f-42a7-852a-6c47498cf069; https://github.com/namelessmc/nameless/commit/98fe4b7fce5509e49e71f1357118db887b8b88e0
CVE: CVE-2022-2822
Published: 2022-08-15
Description: An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://github.com/octoprint/octoprint/commit/82c892ba40b3741d1b7711d949e56af64f5bc2de; https://huntr.dev/bounties/6369f355-e6ef-4469-af75-0f6ff00cde3d; https://github.com/octoprint/octoprint/commit/82c892ba40b3741d1b7711d949e56af64f5bc2de
CVE: CVE-2022-35948
Published: 2022-08-15
Description: undici is an HTTP/1.1 client, written from scratch for Node.js.`=< undici@5.8.0` users are vulnerable to _CRLF Injection_ on headers when using unsanitized input as request headers, more specifically, inside the `content-type` header. Example: ``` import { request } from 'undici' const unsanitizedContentTypeInput = 'application/json\r\n\r\nGET /foo2 HTTP/1.1' await request('http://localhost:3000, { method: 'GET', headers: { 'content-type': unsanitizedContentTypeInput }, }) ``` The above snippet will perform two requests in a single `request` API call: 1) `http://localhost:3000/` 2) `http://localhost:3000/foo2` This issue was patched in Undici v5.8.1. Sanitize input when sending content-type headers using user input as a workaround.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74, CWE-93
References: https://github.com/nodejs/undici/commit/66165d604fd0aee70a93ed5c44ad4cc2df395f80; https://github.com/nodejs/undici/releases/tag/v5.8.2; https://github.com/nodejs/undici/security/advisories/GHSA-f772-66g8-q5h3
CVE: CVE-2022-35954
Published: 2022-08-15
Description: The GitHub Actions ToolKit provides a set of packages to make creating actions easier. The `core.exportVariable` function uses a well known delimiter that attackers can use to break out of that specific variable and assign values to other arbitrary variables. Workflows that write untrusted values to the `GITHUB_ENV` file may cause the path or other environment variables to be modified without the intention of the workflow or action author. Users should upgrade to `@actions/core v1.9.1`. If you are unable to upgrade the `@actions/core` package, you can modify your action to ensure that any user input does not contain the delimiter `_GitHubActionsFileCommandDelimeter_` before calling `core.exportVariable`.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-77, CWE-74
References: https://github.com/actions/toolkit/commit/4beda9cbc00ba6eefe387a937c21087ccb8ee9df; https://github.com/actions/toolkit/security/advisories/GHSA-7r3h-m5j6-3q42; https://github.com/actions/toolkit/commit/4beda9cbc00ba6eefe387a937c21087ccb8ee9df
CVE: CVE-2022-35958
Published: 2022-08-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-37458. Reason: This candidate is a reservation duplicate of CVE-2022-37458. Notes: All CVE users should reference CVE-2022-37458 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-35961
Published: 2022-08-15
Description: OpenZeppelin Contracts is a library for secure smart contract development. The functions `ECDSA.recover` and `ECDSA.tryRecover` are vulnerable to a kind of signature malleability due to accepting EIP-2098 compact signatures in addition to the traditional 65 byte signature format. This is only an issue for the functions that take a single `bytes` argument, and not the functions that take `r, v, s` or `r, vs` as separate arguments. The potentially affected contracts are those that implement signature reuse or replay protection by marking the signature itself as used rather than the signed message or a nonce included in it. A user may take a signature that has already been submitted, submit it again in a different form, and bypass this protection. The issue has been patched in 4.7.3.
CVSS Score: 7.9 (HIGH)
CWE: CWE-354
References: https://github.com/OpenZeppelin/openzeppelin-contracts/pull/3610; https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.7.3; https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-4h98-2769-gh6h
CVE: CVE-2022-36006
Published: 2022-08-15
Description: Arvados is an open source platform for managing, processing, and sharing genomic and other large scientific and biomedical data. A remote code execution (RCE) vulnerability in the Arvados Workbench allows authenticated attackers to execute arbitrary code via specially crafted JSON payloads. This exists in all versions up to 2.4.1 and is fixed in 2.4.2. This vulnerability is specific to the Ruby on Rails Workbench application (“Workbench 1”). We do not believe any other Arvados components, including the TypesScript browser-based Workbench application (“Workbench 2”) or API Server, are vulnerable to this attack. For versions of Arvados earlier than 2.4.2: remove the Ruby-based "Workbench 1" app ("apt-get remove arvados-workbench") from your installation as a workaround.
CVSS Score: 7.9 (HIGH)
CWE: CWE-94, CWE-502, CWE-502
References: https://arvados.org/release-notes/2.4.2/; https://dev.arvados.org/issues/19316; https://github.com/arvados/arvados/security/advisories/GHSA-8867-q4xf-cqgm
CVE: CVE-2022-36007
Published: 2022-08-15
Description: Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. A partial path traversal issue exists within the functions `load-file` and `load-resource`. These functions can be limited to load files from a list of load paths. Assuming Venice has been configured with the load paths: `[ "/Users/foo/resources" ]` When passing **relative** paths to these two vulnerable functions everything is fine: `(load-resource "test.png")` => loads the file "/Users/foo/resources/test.png" `(load-resource "../resources-alt/test.png")` => rejected, outside the load path When passing **absolute** paths to these two vulnerable functions Venice may return files outside the configured load paths: `(load-resource "/Users/foo/resources/test.png")` => loads the file "/Users/foo/resources/test.png" `(load-resource "/Users/foo/resources-alt/test.png")` => loads the file "/Users/foo/resources-alt/test.png" !!! The latter call suffers from the _Partial Path Traversal_ vulnerability. This issue’s scope is limited to absolute paths whose name prefix matches a load path. E.g. for a load-path `"/Users/foo/resources"`, the actor can cause loading a resource also from `"/Users/foo/resources-alt"`, but not from `"/Users/foo/images"`. Versions of Venice before and including v1.10.17 are affected by this issue. Upgrade to Venice >= 1.10.18, if you are on a version < 1.10.18. There are currently no known workarounds.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-22
References: https://github.com/jlangch/venice/commit/215ae91bb964013b0a2d70718a692832d561ae0a; https://github.com/jlangch/venice/commit/c942c73136333bc493050910f171a48e6f575b23; https://github.com/jlangch/venice/releases/tag/v1.10.17
CVE: CVE-2022-37400
Published: 2022-08-15
Description: Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where the required initialization vector for encryption was always the same which weakens the security of the encryption making them vulnerable if an attacker has access to the user's configuration data. This issue affects: Apache OpenOffice versions prior to 4.1.13. Reference: CVE-2022-26306 - LibreOffice
CVSS Score: 8.8 (HIGH)
CWE: CWE-330, CWE-330
References: http://www.openwall.com/lists/oss-security/2022/08/13/1; https://www.openoffice.org/security/cves/CVE-2022-37400.html; http://www.openwall.com/lists/oss-security/2022/08/13/1
CVE: CVE-2022-37401
Published: 2022-08-15
Description: Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making the stored passwords vulnerable to a brute force attack if an attacker has access to the users stored config. This issue affects: Apache OpenOffice versions prior to 4.1.13. Reference: CVE-2022-26307 - LibreOffice
CVSS Score: 8.8 (HIGH)
CWE: CWE-331, CWE-331
References: http://www.openwall.com/lists/oss-security/2022/08/13/2; https://www.openoffice.org/security/cves/CVE-2022-37401.html; http://www.openwall.com/lists/oss-security/2022/08/13/2
CVE: CVE-2022-38221
Published: 2022-08-15
Description: A buffer overflow in the FTcpListener thread in The Isle Evrima (the dedicated server on Windows and Linux) 0.9.88.07 before 2022-08-12 allows a remote attacker to crash any server with an accessible RCON port, or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://takethebait.net/discovering-a-buffer-overflow-in-the-isle-evrima-dedicated-server/; https://takethebait.net/discovering-a-buffer-overflow-in-the-isle-evrima-dedicated-server/
CVE: CVE-2022-38223
Published: 2022-08-15
Description: There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/tats/w3m/issues/242; https://lists.debian.org/debian-lts-announce/2023/08/msg00030.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/
CVE: CVE-2022-33992
Published: 2022-08-15
Description: DNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.
CVSS Score: 7.5 (HIGH)
References: http://dnrd.sourceforge.net/; https://www.openwall.com/lists/oss-security/2022/08/14/1; https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
CVE: CVE-2022-33993
Published: 2022-08-15
Description: Misinterpretation of special domain name characters in DNRD (aka Domain Name Relay Daemon) 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form.
CVSS Score: 5.3 (MEDIUM)
References: http://dnrd.sourceforge.net/; https://www.openwall.com/lists/oss-security/2022/08/14/1; https://www.usenix.org/conference/usenixsecurity21/presentation/jeitner
CVE: CVE-2022-34294
Published: 2022-08-15
Description: totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-331
References: https://github.com/fwdillema/totd; https://www.blackhat.com/presentations/bh-jp-08/bh-jp-08-Kaminsky/BlackHat-Japan-08-Kaminsky-DNS08-BlackOps.pdf; https://www.openwall.com/lists/oss-security/2022/08/14/2
CVE: CVE-2022-36262
Published: 2022-08-15
Description: An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://taocms.com; https://github.com/taogogo/taocms; https://github.com/taogogo/taocms/issues/34
CVE: CVE-2022-33988
Published: 2022-08-15
Description: dproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries, which allows attackers (able to send queries to the resolver) to conduct DNS cache-poisoning attacks because the TXID value is known to the attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://sourceforge.net/projects/dproxy/; https://www.openwall.com/lists/oss-security/2022/08/14/3; https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
CVE: CVE-2022-33989
Published: 2022-08-15
Description: dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-331
References: https://sourceforge.net/projects/dproxy/; https://www.openwall.com/lists/oss-security/2022/08/14/3; https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
CVE: CVE-2022-33990
Published: 2022-08-15
Description: Misinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form.
CVSS Score: 7.5 (HIGH)
References: https://sourceforge.net/projects/dproxy/; https://www.openwall.com/lists/oss-security/2022/08/14/3; https://www.usenix.org/conference/usenixsecurity21/presentation/jeitner
CVE: CVE-2022-33991
Published: 2022-08-15
Description: dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-290
References: https://sourceforge.net/projects/dproxy/; https://www.openwall.com/lists/oss-security/2022/08/14/3; https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
CVE: CVE-2022-2824
Published: 2022-08-15
Description: Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/openemr/openemr/commit/c5d99452c173ef21a8e2241e2bbf4b66e2d7fe11; https://huntr.dev/bounties/1ccb2d1c-6881-4813-a5bc-1603d29b7141; https://github.com/openemr/openemr/commit/c5d99452c173ef21a8e2241e2bbf4b66e2d7fe11
CVE: CVE-2022-35623
Published: 2022-08-15
Description: In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented control packets and access packets with the same SeqAuth
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://docs.google.com/document/d/1Y3sB5JbyrTIOgvA1h9X6o8pJQBG4PjWF/edit?usp=sharing&ouid=[PII_REDACTED][PII_REDACTED]&rtpof=true&sd=true; https://docs.google.com/document/d/1Y3sB5JbyrTIOgvA1h9X6o8pJQBG4PjWF/edit?usp=sharing&ouid=[PII_REDACTED][PII_REDACTED]&rtpof=true&sd=true
CVE: CVE-2022-35624
Published: 2022-08-15
Description: In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented packets with SegO > SegN
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://docs.google.com/document/d/1BrgB1bQiL-cMXQGaXJWSSyaZY51Zxomp/edit?usp=sharing&ouid=[PII_REDACTED][PII_REDACTED]&rtpof=true&sd=true; https://docs.google.com/document/d/1BrgB1bQiL-cMXQGaXJWSSyaZY51Zxomp/edit?usp=sharing&ouid=[PII_REDACTED][PII_REDACTED]&rtpof=true&sd=true
CVE: CVE-2022-36523
Published: 2022-08-15
Description: D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://drive.google.com/file/d/13D6K0UxNNzbLU4YRPfJc7MAk6iKFICdr/view?usp=sharing; https://www.dlink.com/en/security-bulletin/; https://drive.google.com/file/d/13D6K0UxNNzbLU4YRPfJc7MAk6iKFICdr/view?usp=sharing
CVE: CVE-2022-36524
Published: 2022-08-15
Description: D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://d-link.com; https://drive.google.com/file/d/1WNKrDUbYfSWbSve9ONILkLY6dbM8I7hh/view?usp=sharing; https://www.dlink.com/en/security-bulletin/