deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-44340
Published: 2022-02-28
Description: David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_jpg_generate_huffman_table() in "/ok_jpg.c:403".
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/brackeen/ok-file-formats/issues/11; https://github.com/brackeen/ok-file-formats/issues/11
CVE: CVE-2022-24711
Published: 2022-02-28
Description: CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. Prior to version 4.1.9, an improper input validation vulnerability allows attackers to execute CLI routes via HTTP request. Version 4.1.9 contains a patch. There are currently no known workarounds for this vulnerability.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://github.com/codeigniter4/CodeIgniter4/commit/202f41ad522ba1d414b9d9c35aba1cb0c156b781; https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-xjp4-6w75-qrj7; https://github.com/codeigniter4/CodeIgniter4/commit/202f41ad522ba1d414b9d9c35aba1cb0c156b781
CVE: CVE-2022-24712
Published: 2022-02-28
Description: CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery (CSRF) protection mechanism. Users should upgrade to version 4.1.9. There are workarounds for this vulnerability, but users will still need to code as these after upgrading to v4.1.9. Otherwise, the CSRF protection may be bypassed. If auto-routing is enabled, check the request method in the controller method before processing. If auto-routing is disabled, either avoid using `$routes->add()` and instead use HTTP verbs in routes; or check the request method in the controller method before processing.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/codeigniter4/CodeIgniter4/blob/7dc2ece32401ebde67122f7d2460efcaee7c352e/user_guide_src/source/changelogs/v4.1.9.rst; https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-4v37-24gm-h554; https://github.com/codeigniter4/CodeIgniter4/blob/7dc2ece32401ebde67122f7d2460efcaee7c352e/user_guide_src/source/changelogs/v4.1.9.rst
CVE: CVE-2022-26155
Published: 2022-02-28
Description: An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS can occur via a payload in the SAMLResponse parameter of the HTTP request body.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/l00neyhacker/CVE-2022-26155; https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html; https://github.com/l00neyhacker/CVE-2022-26155
CVE: CVE-2022-26156
Published: 2022-02-28
Description: An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request body results in the hijacking of the form action. Form-action hijacking vulnerabilities arise when an application places user-supplied input into the action URL of an HTML form. An attacker can use this vulnerability to construct a URL that, if visited by another application user, will modify the action URL of a form to point to the attacker's server.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/l00neyhacker/CVE-2022-26156; https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html; https://github.com/l00neyhacker/CVE-2022-26156
CVE: CVE-2022-26157
Published: 2022-02-28
Description: An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by the Secure flag. This makes it prone to interception by an attacker if traffic is sent over unencrypted channels.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311
References: https://github.com/l00neyhacker/CVE-2022-26157; https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html; https://github.com/l00neyhacker/CVE-2022-26157
CVE: CVE-2022-26158
Published: 2022-02-28
Description: An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains supplied via a client-controlled Host header. Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/l00neyhacker/CVE-2022-26158; https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html; https://github.com/l00neyhacker/CVE-2022-26158
CVE: CVE-2021-44331
Published: 2022-02-28
Description: ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise().
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/ARM-software/astc-encoder/issues/294; https://github.com/ARM-software/astc-encoder/issues/294
CVE: CVE-2021-44342
Published: 2022-02-28
Description: David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline() in "/ok_png.c:494".
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/brackeen/ok-file-formats/issues/19; https://github.com/brackeen/ok-file-formats/issues/19
CVE: CVE-2020-22844
Published: 2022-02-28
Description: A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/colorlight/mikrotik_poc/blob/master/two_vulns.md; https://mikrotik.com/support; https://github.com/colorlight/mikrotik_poc/blob/master/two_vulns.md
CVE: CVE-2020-22845
Published: 2022-02-28
Description: A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted FTP requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/colorlight/mikrotik_poc/blob/master/two_vulns.md; https://mikrotik.com/support; https://github.com/colorlight/mikrotik_poc/blob/master/two_vulns.md
CVE: CVE-2022-25013
Published: 2022-02-28
Description: Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the "key" and "fm" parameters in the component login.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gamonoid/icehrm/issues/284; https://github.com/gamonoid/icehrm/issues/284
CVE: CVE-2022-25014
Published: 2022-02-28
Description: Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "m" parameter in the Dashboard of the current user. This vulnerability allows attackers to compromise session credentials via user interaction with a crafted link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gamonoid/icehrm/issues/283; https://github.com/gamonoid/icehrm/issues/283
CVE: CVE-2022-25015
Published: 2022-02-28
Description: A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the First Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/gamonoid/icehrm/issues/285; https://github.com/gamonoid/icehrm/issues/285
CVE: CVE-2022-25023
Published: 2022-02-28
Description: Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt():AudioFile.h.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/adamstark/AudioFile/issues/58; https://github.com/adamstark/AudioFile/issues/58
CVE: CVE-2022-26181
Published: 2022-02-28
Description: Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():src/lepton/bitops.cc:108.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://drive.google.com/file/d/1bJlHozO37c5NZ1wI0NBWh0yHHyTcfaQL/view?usp=sharing; https://github.com/dropbox/lepton; https://github.com/dropbox/lepton/issues/154
CVE: CVE-2022-26315
Published: 2022-02-28
Description: qrcp through 0.8.4, in receive mode, allows ../ Directory Traversal via the file name specified by the uploader.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/claudiodangelis/qrcp/issues/223; https://github.com/claudiodangelis/qrcp/issues/223
CVE: CVE-2021-41111
Published: 2022-02-28
Description: Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to versions 3.4.5 and 3.3.15, an authenticated user with authorization to read webhooks in one project can craft a request to reveal Webhook definitions and tokens in another project. The user could use the revealed webhook tokens to trigger webhooks. Severity depends on trust level of authenticated users and whether any webhooks exist that trigger sensitive actions. There are patches for this vulnerability in versions 3.4.5 and 3.3.15. There are currently no known workarounds.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-639
References: https://github.com/rundeck/rundeck/commit/a3bdc06a0731da[PII_REDACTED]22a5b9d2b4facec5; https://github.com/rundeck/rundeck/security/advisories/GHSA-mfqj-f22m-gv8j; https://github.com/rundeck/rundeck/commit/a3bdc06a0731da[PII_REDACTED]22a5b9d2b4facec5
CVE: CVE-2021-41112
Published: 2022-02-28
Description: Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In versions prior to 3.4.5, authenticated users could craft a request to modify or delete System or Project level Calendars, without appropriate authorization. Modifying or removing calendars could cause Scheduled Jobs to execute, or not execute on desired calendar days. Severity depends on trust level of authenticated users and impact of running or not running scheduled jobs on days governed by calendar definitions. Version 3.4.5 contains a patch for this issue. There are currently no known workarounds.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://github.com/rundeck/rundeck/security/advisories/GHSA-f68p-c9wh-j2q8; https://github.com/rundeck/rundeck/security/advisories/GHSA-f68p-c9wh-j2q8
CVE: CVE-2021-45414
Published: 2022-02-28
Description: A Remote Code Execution (RCE) vulnerability exists in DataRobot through 2021-10-28 because it allows submission of a Docker environment or Java driver.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/166073/Datarobot-Remote-Code-Execution.html; http://packetstormsecurity.com/files/166073/Datarobot-Remote-Code-Execution.html
CVE: CVE-2021-27008
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27009
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27010
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27011
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27012
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27013
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27014
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27015
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27016
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-27000
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36810
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36811
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36812
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36813
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36814
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36815
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36816
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36817
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36818
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36819
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-36820
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2022-0743
Published: 2022-02-28
Description: Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/getgrav/grav/commit/3dd0cabeac9835fe64dcb4b68c658b39f1f6be2f; https://huntr.dev/bounties/32ea4ddb-5b41-4bf9-b5a1-ef455fe2d293; https://github.com/getgrav/grav/commit/3dd0cabeac9835fe64dcb4b68c658b39f1f6be2f
CVE: CVE-2022-23906
Published: 2022-02-28
Description: CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability is exploited via a crafted image file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://dev.cmsmadesimple.org/bug/view/12502; http://dev.cmsmadesimple.org/bug/view/12502
CVE: CVE-2022-23907
Published: 2022-02-28
Description: CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://dev.cmsmadesimple.org/bug/view/12503; http://dev.cmsmadesimple.org/bug/view/12503
CVE: CVE-2022-25028
Published: 2022-02-28
Description: Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the collected_by parameter under the List of Collections module.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://raw.githubusercontent.com/fuzzyap1/Vendors-System-Vulnerabilities/main/Home%20Owners%20Collection%20Management%20System/xss.md; https://raw.githubusercontent.com/fuzzyap1/Vendors-System-Vulnerabilities/main/Home%20Owners%20Collection%20Management%20System/xss.md
CVE: CVE-2022-25029
Published: 2022-02-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-25096. Reason: This candidate is a duplicate of CVE-2022-25096. Notes: All CVE users should reference CVE-2022-25096 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-25407
Published: 2022-02-28
Description: Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doctor parameter at /admin-panel1.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/kishan0725/Hospital-Management-System/issues/21; https://github.com/kishan0725/Hospital-Management-System/issues/21
CVE: CVE-2022-25408
Published: 2022-02-28
Description: Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-panel1.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/kishan0725/Hospital-Management-System/issues/22; https://github.com/kishan0725/Hospital-Management-System/issues/22
CVE: CVE-2022-25409
Published: 2022-02-28
Description: Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the demail parameter at /admin-panel1.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/kishan0725/Hospital-Management-System/issues/20; https://github.com/kishan0725/Hospital-Management-System/issues/20
CVE: CVE-2022-25410
Published: 2022-02-28
Description: Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/maxsite/cms/issues/485; https://github.com/maxsite/cms/issues/485
CVE: CVE-2022-25411
Published: 2022-02-28
Description: A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/maxsite/cms/issues/487; https://github.com/maxsite/cms/issues/487
CVE: CVE-2022-25412
Published: 2022-02-28
Description: Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/maxsite/cms/issues/486; https://github.com/maxsite/cms/issues/486
CVE: CVE-2022-25413
Published: 2022-02-28
Description: Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/maxsite/cms/issues/484; https://github.com/maxsite/cms/issues/484
CVE: CVE-2022-26332
Published: 2022-03-01
Description: Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/andreapollastri/cipi/releases; https://www.exploit-db.com/exploits/50788; https://github.com/andreapollastri/cipi/releases
CVE: CVE-2020-12775
Published: 2022-03-01
Description: Hicos citizen certificate client-side component does not filter special characters for command parameters in specific web URLs. An unauthenticated remote attacker can exploit this vulnerability to perform command injection attack to execute arbitrary system command, disrupt system or terminate service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://moica.nat.gov.tw/rac_plugin.html; https://www.twcert.org.tw/tw/cp-132-5695-421a7-1.html; https://moica.nat.gov.tw/rac_plugin.html
CVE: CVE-2021-42767
Published: 2022-03-01
Description: A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-4mpj-488r-vh6m; https://neo4j.com; https://github.com/neo4j-contrib/neo4j-apoc-procedures/security/advisories/GHSA-4mpj-488r-vh6m
CVE: CVE-2021-42951
Published: 2022-03-01
Description: A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new, specially crafted Algorithm and subsequently launch remote code execution with their desired result.
CVSS Score: 8.8 (HIGH)
References: http://algorithmia.com; https://seclists.org/fulldisclosure/2022/Feb/33; http://algorithmia.com
CVE: CVE-2021-44961
Published: 2022-03-01
Description: A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust available memory. An attacker can provide malicious files to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://libslic3r.com; http://slic3r.com; https://hackmd.io/nDT_UKLyRQendxDwil9A4w
CVE: CVE-2021-44962
Published: 2022-03-01
Description: An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://hackmd.io/KSI1bwGfSyO7T8UCf0HeTw; https://slic3r.org; https://hackmd.io/KSI1bwGfSyO7T8UCf0HeTw
CVE: CVE-2022-22262
Published: 2022-03-01
Description: ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file access vulnerability. Since this function does not validate the path before deletion, an unauthenticated local attacker can create an unexpected symbolic link to system file path, to delete arbitrary system files and disrupt system service.
CVSS Score: 7.7 (HIGH)
CWE: CWE-59, CWE-59
References: https://www.twcert.org.tw/tw/cp-132-5693-f108f-1.html; https://www.twcert.org.tw/tw/cp-132-5693-f108f-1.html
CVE: CVE-2022-24446
Published: 2022-03-01
Description: An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user information) even if no SSH server or user is associated to the operator.
CVSS Score: 4.3 (MEDIUM)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-24446; https://excellium-services.com/cert-xlm-advisory/cve-2022-24446/; https://www.manageengine.com/key-manager/release-notes.html#6200
CVE: CVE-2022-25018
Published: 2022-03-01
Description: Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://pluxml.com; https://github.com/MoritzHuppert/CVE-2022-25018/blob/main/CVE-2022-25018.pdf; https://github.com/pluxml/PluXml