deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2261
Published: 2022-08-29
Description: The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://wpscan.com/vulnerability/f6091d7b-97b5-42f2-b2f4-09a0fe6d5a21; https://wpscan.com/vulnerability/f6091d7b-97b5-42f2-b2f4-09a0fe6d5a21
CVE: CVE-2022-2267
Published: 2022-08-29
Description: The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for example
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://wpscan.com/vulnerability/e3bd9f8c-919a-40af-9e80-607573e71870; https://wpscan.com/vulnerability/e3bd9f8c-919a-40af-9e80-607573e71870
CVE: CVE-2022-2373
Published: 2022-08-29
Description: The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/6aa9aa0d-b447-4584-a07e-b8a0d1b83a31; https://wpscan.com/vulnerability/6aa9aa0d-b447-4584-a07e-b8a0d1b83a31
CVE: CVE-2022-2374
Published: 2022-08-29
Description: The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/12062d78-7a0d-4dc1-9bd6-6c54aa6bc761; https://wpscan.com/vulnerability/12062d78-7a0d-4dc1-9bd6-6c54aa6bc761
CVE: CVE-2022-2537
Published: 2022-08-29
Description: The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ae613148-85d8-47a0-952d-49c29584676f; https://wpscan.com/vulnerability/ae613148-85d8-47a0-952d-49c29584676f
CVE: CVE-2022-2538
Published: 2022-08-29
Description: The WP Hide & Security Enhancer WordPress plugin before 1.8 does not escape a parameter before outputting it back in an attribute of a backend page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/afa1e159-30bc-42d2-b3f8-8c868b113d3e; https://wpscan.com/vulnerability/afa1e159-30bc-42d2-b3f8-8c868b113d3e
CVE: CVE-2022-2556
Published: 2022-08-29
Description: The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for example
CVSS Score: 2.7 (LOW)
CWE: CWE-918
References: https://wpscan.com/vulnerability/f2a59eaa-6b44-4098-912f-823289cf33b0; https://wpscan.com/vulnerability/f2a59eaa-6b44-4098-912f-823289cf33b0
CVE: CVE-2022-2559
Published: 2022-08-29
Description: The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/062599ce-c630-487e-bb43-c3b27a62b9ec; https://wpscan.com/vulnerability/062599ce-c630-487e-bb43-c3b27a62b9ec
CVE: CVE-2022-2599
Published: 2022-08-29
Description: The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/276a7fc5-3d0d-446d-92cf-20060aecd0ef; https://wpscan.com/vulnerability/276a7fc5-3d0d-446d-92cf-20060aecd0ef
CVE: CVE-2022-2638
Published: 2022-08-29
Description: The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73, CWE-610
References: https://wpscan.com/vulnerability/70840a72-ccdc-4eee-9ad2-874809e5de11; https://wpscan.com/vulnerability/70840a72-ccdc-4eee-9ad2-874809e5de11
CVE: CVE-2022-36036
Published: 2022-08-29
Description: mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it will execute when the component is loaded by MDXjs. This vulnerability was patched in version(s) 1.3.0 and 2.0.0-rc2. There are currently no known workarounds.
CVSS Score: 3.6 (LOW)
CWE: CWE-94
References: https://github.com/sjwall/mdx-mermaid/commit/f2b99386660fd[PII_REDACTED]c3f1314ebbcdfd2a; https://github.com/sjwall/mdx-mermaid/security/advisories/GHSA-rvgm-35jw-q628; https://github.com/sjwall/mdx-mermaid/commit/f2b99386660fd[PII_REDACTED]c3f1314ebbcdfd2a
CVE: CVE-2022-36037
Published: 2022-08-29
Description: kirby is a content management system (CMS) that adapts to many different projects and helps you build your own ideal interface. Cross-site scripting (XSS) is a type of vulnerability that allows execution of any kind of JavaScript code inside the Panel session of the same or other users. In the Panel, a harmful script can for example trigger requests to Kirby's API with the permissions of the victim. If bad actors gain access to your group of authenticated Panel users they can escalate their privileges via the Panel session of an admin user. Depending on your site, other JavaScript-powered attacks are possible. The multiselect field allows selection of tags from an autocompleted list. Unfortunately, the Panel in Kirby 3.5 used HTML rendering for the raw option value. This allowed **attackers with influence on the options source** to store HTML code. The browser of the victim who visited a page with manipulated multiselect options in the Panel will then have rendered this malicious HTML code when the victim opened the autocomplete dropdown. Users are *not* affected by this vulnerability if you don't use the multiselect field or don't use it with options that can be manipulated by attackers. The problem has been patched in Kirby 3.5.8.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/getkirby/kirby/commit/b5b8863885e17556abc070dde1e20aec15fbfdf5; https://github.com/getkirby/kirby/releases/tag/3.5.8.1; https://github.com/getkirby/kirby/security/advisories/GHSA-3f89-869f-5w76
CVE: CVE-2022-3035
Published: 2022-08-29
Description: Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.0.11.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/snipe/snipe-it/commit/9cf5f30c77df6ab60baab1c0e6bb0b4e773f0eae; https://huntr.dev/bounties/0bbb1046-ea9e-4cb9-bc91-b294a72d1902; https://github.com/snipe/snipe-it/commit/9cf5f30c77df6ab60baab1c0e6bb0b4e773f0eae
CVE: CVE-2020-26938
Published: 2022-08-29
Description: In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked against an incorrect URI pattern ("[a-zA-Z][a-zA-Z0-9+.-]+:") before making a redirection. This allows a malicious client to pass an XSS payload through the redirect_uri parameter while making an authorization request. NOTE: this vulnerability is similar to CVE-2020-7741.
CVSS Score: 7.2 (HIGH)
CWE: CWE-601
References: https://github.com/oauthjs/node-oauth2-server/blob/91d2cbe70a0eddc53d72def96864e2de0fd41703/lib/grant-types/authorization-code-grant-type.js#L143; https://github.com/oauthjs/node-oauth2-server/blob/91d2cbe70a0eddc53d72def96864e2de0fd41703/lib/validator/is.js#L12; https://github.com/oauthjs/node-oauth2-server/issues/637
CVE: CVE-2021-38934
Published: 2022-08-29
Description: IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 210671.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/210671; https://www.ibm.com/support/pages/node/6615619; https://exchange.xforce.ibmcloud.com/vulnerabilities/210671
CVE: CVE-2022-21385
Published: 2022-08-29
Description: A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVSS Score: 6.2 (MEDIUM)
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea010070d0a7497253d5a6f919f6dd107450b31a; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea010070d0a7497253d5a6f919f6dd107450b31a
CVE: CVE-2022-32993
Published: 2022-08-29
Description: TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.
CVSS Score: 9.8 (CRITICAL)
References: http://totolink.com; https://github.com/laotun-s/POC/blob/main/CVE-2022-32993.txt; http://totolink.com
CVE: CVE-2022-37177
Published: 2022-08-29
Description: HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence cipher has been removed, and TLS 1.2 is now used for encryption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://github.com/JC175/CVE-2022-37177; https://www.hirevue.com/; https://github.com/JC175/CVE-2022-37177
CVE: CVE-2022-38772
Published: 2022-08-29
Description: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
CVSS Score: 8.8 (HIGH)
References: https://manageengine.com; https://www.manageengine.com/itom/advisory/cve-2022-38772.html; https://manageengine.com
CVE: CVE-2022-36553
Published: 2022-08-29
Description: Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://gist.github.com/Nwqda/b27418ab801eb0b9cdbe8d042cb0249b; https://hytec.co.jp/eng/products/our-brand/hwl-2511-ss.html; https://hytec.co.jp/eng/wordpress/wp-content/uploads/2019/09/hwl-2511-ss-ds.3.0.pdf
CVE: CVE-2022-36554
Published: 2022-08-29
Description: A command injection vulnerability in the CLI (Command Line Interface) implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://gist.github.com/Nwqda/b27418ab801eb0b9cdbe8d042cb0249b; https://hytec.co.jp/eng/products/our-brand/hwl-2511-ss.html; https://hytec.co.jp/eng/wordpress/wp-content/uploads/2019/09/hwl-2511-ss-ds.3.0.pdf
CVE: CVE-2022-36555
Published: 2022-08-29
Description: Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: https://gist.github.com/Nwqda/b27418ab801eb0b9cdbe8d042cb0249b; https://hytec.co.jp/eng/products/our-brand/hwl-2511-ss.html; https://hytec.co.jp/eng/wordpress/wp-content/uploads/2019/09/hwl-2511-ss-ds.3.0.pdf
CVE: CVE-2022-36556
Published: 2022-08-29
Description: Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://gist.github.com/Nwqda/88232102fed50b54c43871e88e993b54; https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a100/; https://gist.github.com/Nwqda/88232102fed50b54c43871e88e993b54
CVE: CVE-2022-36557
Published: 2022-08-29
Description: Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://gist.github.com/Nwqda/88232102fed50b54c43871e88e993b54; https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a100/; https://gist.github.com/Nwqda/88232102fed50b54c43871e88e993b54
CVE: CVE-2022-36558
Published: 2022-08-29
Description: Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gist.github.com/Nwqda/88232102fed50b54c43871e88e993b54; https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a100/; https://gist.github.com/Nwqda/88232102fed50b54c43871e88e993b54
CVE: CVE-2022-36559
Published: 2022-08-29
Description: Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping parameter at ping_exec.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://gist.github.com/Nwqda/0db1fc6cfa39d7f0592d44e18c40146e; https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a200/; https://gist.github.com/Nwqda/0db1fc6cfa39d7f0592d44e18c40146e
CVE: CVE-2022-36560
Published: 2022-08-29
Description: Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gist.github.com/Nwqda/0db1fc6cfa39d7f0592d44e18c40146e; https://www.seiko-sol.co.jp/products/skybridge/lineup/mb-a200/; https://gist.github.com/Nwqda/0db1fc6cfa39d7f0592d44e18c40146e
CVE: CVE-2022-37680
Published: 2022-08-29
Description: An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system (Camera, Decoder and Encoder) and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://gist.github.com/Nwqda/5efea18c9142c6a966d85c6be2c0c2b5; https://www.hitachi-kokusai.co.jp/global/en/products/info/vulnerable/hitachi-sec-2022-001/index.html; https://gist.github.com/Nwqda/5efea18c9142c6a966d85c6be2c0c2b5
CVE: CVE-2022-37681
Published: 2022-08-29
Description: Hitachi Kokusai Electric Newtork products for monitoring system (Camera, Decoder and Encoder) and below allows attckers to perform a directory traversal via a crafted GET request to the endpoint /ptippage.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://gist.github.com/Nwqda/5efea18c9142c6a966d85c6be2c0c2b5; https://www.hitachi-kokusai.co.jp/global/en/products/info/vulnerable/hitachi-sec-2022-001/index.html; https://gist.github.com/Nwqda/5efea18c9142c6a966d85c6be2c0c2b5
CVE: CVE-2022-38625
Published: 2022-08-29
Description: Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position is that this is a design choice, not a vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-345, CWE-345
References: https://gist.github.com/Nwqda/dfad4e11b545dd40aebca6031d202f66; https://www.patlite.com/network-products/lineup/nh-fb.html; https://www.youtube.com/watch?v=4r9FH6U2VR8
CVE: CVE-2022-36709
Published: 2022-08-30
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/edit_book_details.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-6.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-6.md
CVE: CVE-2022-36711
Published: 2022-08-30
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bookdetails.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-5.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-5.md
CVE: CVE-2022-36712
Published: 2022-08-30
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/studentdetails.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-4.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-4.md
CVE: CVE-2022-36713
Published: 2022-08-30
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /librarian/lab.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-8.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-8.md
CVE: CVE-2022-36714
Published: 2022-08-30
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-7.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-7.md
CVE: CVE-2022-38784
Published: 2022-08-30
Description: Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2022/09/02/11; https://github.com/jeffssh/CVE-2021-30860; https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md
CVE: CVE-2022-24106
Published: 2022-08-30
Description: In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.xpdfreader.com/security-fixes.html; https://dl.xpdfreader.com/xpdf-4.04.tar.gz; http://www.xpdfreader.com/security-fixes.html
CVE: CVE-2022-24107
Published: 2022-08-30
Description: Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.xpdfreader.com/security-fixes.html; https://dl.xpdfreader.com/xpdf-4.04.tar.gz; http://www.xpdfreader.com/security-fixes.html
CVE: CVE-2022-25635
Published: 2022-08-30
Description: Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthenticated attacker in the adjacent network can exploit this vulnerability to disrupt service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.twcert.org.tw/tw/cp-132-6456-fc6c5-1.html; https://www.twcert.org.tw/tw/cp-132-6456-fc6c5-1.html
CVE: CVE-2022-25646
Published: 2022-08-30
Description: All versions of package x-data-spreadsheet are vulnerable to Cross-site Scripting (XSS) due to missing sanitization of values inserted into the cells.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/myliang/x-spreadsheet/issues/580; https://security.snyk.io/vuln/SNYK-JS-XDATASPREADSHEET-2430381; https://youtu.be/Ij-8VVKNh7U
CVE: CVE-2022-25857
Published: 2022-08-30
Description: The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776
References: https://bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc[PII_REDACTED]0cf174; https://bitbucket.org/snakeyaml/snakeyaml/issues/525; https://github.com/snakeyaml/snakeyaml/commit/fc300780da21f4bb92c148bc[PII_REDACTED]0cf174
CVE: CVE-2022-25887
Published: 2022-08-30
Description: The package sanitize-html before 2.7.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure global regular expression replacement logic of HTML comment removal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/apostrophecms/sanitize-html/commit/b4682c12fd30e12e82fa2d9b766de91d7d2cd23c; https://github.com/apostrophecms/sanitize-html/pull/557; https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3008102
CVE: CVE-2022-26527
Published: 2022-08-30
Description: Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.twcert.org.tw/tw/cp-132-6457-66bc9-1.html; https://www.twcert.org.tw/tw/cp-132-6457-66bc9-1.html
CVE: CVE-2022-26528
Published: 2022-08-30
Description: Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.twcert.org.tw/tw/cp-132-6458-5052f-1.html; https://www.twcert.org.tw/tw/cp-132-6458-5052f-1.html
CVE: CVE-2022-26529
Published: 2022-08-30
Description: Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.twcert.org.tw/tw/cp-132-6459-09c82-1.html; https://www.twcert.org.tw/tw/cp-132-6459-09c82-1.html
CVE: CVE-2022-38116
Published: 2022-08-30
Description: Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://www.twcert.org.tw/tw/cp-132-6460-2bb02-1.html; https://www.twcert.org.tw/tw/cp-132-6460-2bb02-1.html