deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-42196
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() located in abc.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/172; https://github.com/matthiaskramm/swftools/issues/172
CVE: CVE-2021-42197
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used. It allows an attacker to cause code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-401
References: https://github.com/matthiaskramm/swftools/issues/177; https://github.com/matthiaskramm/swftools/issues/177
CVE: CVE-2021-42198
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/168; https://github.com/matthiaskramm/swftools/issues/168
CVE: CVE-2021-42199
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/173; https://github.com/matthiaskramm/swftools/issues/173
CVE: CVE-2021-42200
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located in swfdump.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/170; https://github.com/matthiaskramm/swftools/issues/170
CVE: CVE-2021-42201
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located in rfxswf.c. It allows an attacker to cause code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/175; https://github.com/matthiaskramm/swftools/issues/175
CVE: CVE-2021-42202
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter() located in swffilter.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/171; https://github.com/matthiaskramm/swftools/issues/171
CVE: CVE-2021-42203
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/matthiaskramm/swftools/issues/176; https://github.com/matthiaskramm/swftools/issues/176
CVE: CVE-2021-42204
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/169; https://github.com/matthiaskramm/swftools/issues/169
CVE: CVE-2021-42872
Published: 2022-06-02
Description: TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://ex1200t.com; http://totolink.net/; https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_NoticeUrl_rce4.md
CVE: CVE-2021-43306
Published: 2022-06-02
Description: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/; https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/
CVE: CVE-2021-43307
Published: 2022-06-02
Description: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://research.jfrog.com/vulnerabilities/semver-regex-redos-xray-211349/; https://research.jfrog.com/vulnerabilities/semver-regex-redos-xray-211349/
CVE: CVE-2021-43308
Published: 2022-06-02
Description: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the markdown-link-extractor npm package, when an attacker is able to supply arbitrary input to the module's exported function
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://research.jfrog.com/vulnerabilities/markdown-link-extractor-redos-xray-211350/; https://research.jfrog.com/vulnerabilities/markdown-link-extractor-redos-xray-211350/
CVE: CVE-2021-43512
Published: 2022-06-02
Description: An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android, allows attackers to cause unspecified consequences due to being able to decompile a local application and extract their API keys.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://medium.com/%40janmejayaswainofficial/advisory-of-cve-2021-43512-5e54e6a93101; https://www.flightradar24.com; https://www.flightradar24.com.aa
CVE: CVE-2021-44080
Published: 2022-06-02
Description: A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnostic_tracing.json endpoint.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://research.nccgroup.com/2022/05/24/technical-advisory-sercomm-h500s-authenticated-remote-command-execution-cve-2021-44080/; https://www.sercomm.com; https://research.nccgroup.com/2022/05/24/technical-advisory-sercomm-h500s-authenticated-remote-command-execution-cve-2021-44080/
CVE: CVE-2021-44095
Published: 2022-06-02
Description: A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/projectworldsofficial/hospital-management-system-in-php; https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/1; https://medium.com/%40shubhamvpandey/cve-2021-44095-481059d14470
CVE: CVE-2021-44096
Published: 2022-06-02
Description: EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profile_action - update_user. This allows a remote attacker to compromise Application SQL database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/EGavilan-Media/User-Registration-and-Login-System-With-Admin-Panel/issues/2; https://medium.com/%40shubhamvpandey/cve-2021-44096-c8874ee47656; https://github.com/EGavilan-Media/User-Registration-and-Login-System-With-Admin-Panel/issues/2
CVE: CVE-2021-44097
Published: 2022-06-02
Description: EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This allows a remote attacker to compromise Application SQL database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/EGavilan-Media/Contact-Form-With-Messages-Entry-Management/issues/1; https://medium.com/%40shubhamvpandey/cve-2021-44097-d51c11258571; https://github.com/EGavilan-Media/Contact-Form-With-Messages-Entry-Management/issues/1
CVE: CVE-2021-44098
Published: 2022-06-02
Description: EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQL database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/EGavilan-Media/Expense-Management-System/issues/1; https://medium.com/%40shubhamvpandey/cve-2021-44098-8dbaced8b854; https://github.com/EGavilan-Media/Expense-Management-System/issues/1
CVE: CVE-2021-4014
Published: 2022-06-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-1215
Published: 2022-06-02
Description: A format string vulnerability was found in libinput
CVSS Score: 7.8 (HIGH)
CWE: CWE-134, CWE-134
References: https://seclists.org/oss-sec/2022/q2/47; https://security.gentoo.org/glsa/202310-14; https://seclists.org/oss-sec/2022/q2/47
CVE: CVE-2022-1419
Published: 2022-06-02
Description: The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2077560; https://www.debian.org/security/2022/dsa-5173; https://bugzilla.redhat.com/show_bug.cgi?id=2077560
CVE: CVE-2022-1462
Published: 2022-06-02
Description: An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=2078466; https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html; https://seclists.org/oss-sec/2022/q2/155
CVE: CVE-2022-1652
Published: 2022-06-02
Description: Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1832397; https://francozappa.github.io/about-bias/; https://kb.cert.org/vuls/id/647177/
CVE: CVE-2022-1660
Published: 2022-06-02
Description: The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-01
CVE: CVE-2022-1661
Published: 2022-06-02
Description: The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-01
CVE: CVE-2022-1786
Published: 2022-06-02
Description: A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-416, CWE-843
References: https://bugzilla.redhat.com/show_bug.cgi?id=2087760; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.debian.org/security/2022/dsa-5161
CVE: CVE-2022-1789
Published: 2022-06-02
Description: With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1832397; https://francozappa.github.io/about-bias/; https://kb.cert.org/vuls/id/647177/
CVE: CVE-2022-1797
Published: 2022-06-02
Description: A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-400
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1135559; https://www.cisa.gov/uscert/ics/advisories/icsa-22-144-01; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1135559
CVE: CVE-2022-1929
Published: 2022-06-02
Description: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1333, CWE-1333
References: https://research.jfrog.com/vulnerabilities/devcert-redos-xray-211352/; https://research.jfrog.com/vulnerabilities/devcert-redos-xray-211352/
CVE: CVE-2022-1943
Published: 2022-06-02
Description: A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_write_fi(). A local user could use this flaw to crash the system or potentially
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1ad35dd0548ce947d97aaf92f7f2f9a202951cf; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1ad35dd0548ce947d97aaf92f7f2f9a202951cf
CVE: CVE-2022-1949
Published: 2022-06-02
Description: An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://bugzilla.redhat.com/show_bug.cgi?id=2091781; https://bugzilla.redhat.com/show_bug.cgi?id=2091781
CVE: CVE-2022-1968
Published: 2022-06-02
Description: Use After Free in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/409510c588b1eec1ae33511ae97a21eb8e110895
CVE: CVE-2022-22767
Published: 2022-06-02
Description: Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same default local operating system credentials or domain-joined server(s) credentials that may be shared across product types. If exploited, threat actors may be able to gain privileged access to the underlying file system and could potentially exploit or gain access to ePHI or other sensitive information.
CVSS Score: 8.8 (HIGH)
CWE: CWE-262, CWE-522
References: https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products-default-credentials; https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products-default-credentials
CVE: CVE-2022-23236
Published: 2022-06-02
Description: E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-312
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/
CVE: CVE-2022-23237
Published: 2022-06-02
Description: E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/
CVE: CVE-2022-24238
Published: 2022-06-02
Description: ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://aceware.com; http://aceweb.com; https://www.aceware.com/forum/viewtopic.php?f=7&t=481
CVE: CVE-2022-24239
Published: 2022-06-02
Description: ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://aceware.com; http://aceweb.com; https://www.aceware.com/forum/viewtopic.php?f=7&t=481
CVE: CVE-2022-24240
Published: 2022-06-02
Description: ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://aceware.com; http://aceweb.com; https://www.aceware.com/forum/viewtopic.php?f=7&t=481
CVE: CVE-2022-24241
Published: 2022-06-02
Description: ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-610
References: http://aceware.com; http://aceweb.com; https://www.aceware.com/forum/viewtopic.php?f=7&t=481
CVE: CVE-2022-24581
Published: 2022-06-02
Description: ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password hash of the user executing the ACEweb Online software.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: http://aceware.com; http://aceweb.com; https://www.aceware.com/forum/viewtopic.php?f=7&t=481
CVE: CVE-2022-24700
Published: 2022-06-02
Description: An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to cause a denial of service (daemon crash) via a malicious AX.25 packet over the air. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://winaprs.com/; https://www.coalfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1; https://winaprs.com/
CVE: CVE-2022-24701
Published: 2022-06-02
Description: An issue was discovered in WinAPRS 2.9.0. A buffer overflow in national.txt processing allows a local attacker to cause a denial of service or possibly achieve code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://winaprs.com/; https://www.coalfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1; https://winaprs.com/
CVE: CVE-2022-24702
Published: 2022-06-02
Description: An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Coalfire-Research/WinAPRS-Exploits; https://news.ycombinator.com/item?id=31571476; https://winaprs.com/
CVE: CVE-2022-24967
Published: 2022-06-02
Description: Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://blackrainbow.com/corporate/; https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-24967; https://excellium-services.com/cert-xlm-advisory/CVE-2022-24967
CVE: CVE-2022-25237
Published: 2022-06-02
Description: Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter. By appending ;i18ntranslation or /../i18ntranslation/ to the end of a URL, users with no privileges can access privileged API endpoints. This can lead to remote code execution by abusing the privileged API actions.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/bonitasoft/bonita-web; https://rhinosecuritylabs.com/application-security/cve-2022-25237-bonitasoft-authorization-bypass/; https://github.com/bonitasoft/bonita-web
CVE: CVE-2022-26491
Published: 2022-06-02
Description: An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://developer.pidgin.im/wiki/FullChangeLog; https://github.com/xsf/xeps/pull/1158; https://keep.imfreedom.org/pidgin/pidgin/rev/13cdb7956bdc
CVE: CVE-2022-26971
Published: 2022-06-02
Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be executed without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://www.barco.com/en/support/knowledge-base/KB12681; https://www.barco.com/en/support/transform-n-management-server; https://www.barco.com/en/support/knowledge-base/KB12681
CVE: CVE-2022-26972
Published: 2022-06-02
Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.barco.com/en/support/knowledge-base/KB12685; https://www.barco.com/en/support/transform-n-management-server; https://www.barco.com/en/support/knowledge-base/KB12685
CVE: CVE-2022-26973
Published: 2022-06-02
Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://www.barco.com/en/support/knowledge-base/KB12678; https://www.barco.com/en/support/transform-n-management-server; https://www.barco.com/en/support/knowledge-base/KB12678
CVE: CVE-2022-26974
Published: 2022-06-02
Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization in the upload mechanism leads to reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.barco.com/en/support/knowledge-base/KB12684; https://www.barco.com/en/support/transform-n-management-server; https://www.barco.com/en/support/knowledge-base/KB12684
CVE: CVE-2022-26975
Published: 2022-06-02
Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://www.barco.com/en/support/knowledge-base/KB12677; https://www.barco.com/en/support/transform-n-management-server; https://www.barco.com/en/support/knowledge-base/KB12677