deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-45117
Published: 2022-03-21
Description: The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-285795.pdf; https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-45117.pdf; https://www.youtube.com/watch?v=qv-RBdCaV4k
CVE: CVE-2022-26494
Published: 2022-03-21
Description: An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://docs.keyfactor.com/signserver/; https://support.keyfactor.com/hc/en-us/articles/[PII_REDACTED]715-Security-Advisory-SignServer-Cross-site-scripting-issue-in-Admin-Web; https://doc.primekey.com/signserver
CVE: CVE-2022-22394
Published: 2022-03-21
Description: The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulnerable server.
CVSS Score: 8.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/222147; https://www.ibm.com/support/pages/node/6564745; https://exchange.xforce.ibmcloud.com/vulnerabilities/222147
CVE: CVE-2022-26960
Published: 2022-03-21
Description: connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/Studio-42/elFinder/commit/3b758495538a448ac8830ee3559e7fb2c260c6db; https://www.synacktiv.com/publications.html; https://www.synacktiv.com/publications/elfinder-the-story-of-a-repwning.html
CVE: CVE-2022-24235
Published: 2022-03-21
Description: A Cross-Site Request Forgery (CSRF) in the management portal of Snapt Aria v12.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.cryptnetix.com/blog/2022/03/19/Snapt-Aria-Vulnerability-Disclosure.html; https://www.snapt.net/platforms/aria-adc; https://www.cryptnetix.com/blog/2022/03/19/Snapt-Aria-Vulnerability-Disclosure.html
CVE: CVE-2022-24236
Published: 2022-03-21
Description: An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts.
CVSS Score: 3.5 (LOW)
CWE: CWE-732
References: https://www.cryptnetix.com/blog/2022/03/19/Snapt-Aria-Vulnerability-Disclosure.html; https://www.snapt.net/platforms/aria-adc; https://www.cryptnetix.com/blog/2022/03/19/Snapt-Aria-Vulnerability-Disclosure.html
CVE: CVE-2022-24237
Published: 2022-03-21
Description: The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability. This vulnerability allows authenticated attackers to execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.cryptnetix.com/blog/2022/03/19/Snapt-Aria-Vulnerability-Disclosure.html; https://www.snapt.net/platforms/aria-adc; https://www.cryptnetix.com/blog/2022/03/19/Snapt-Aria-Vulnerability-Disclosure.html
CVE: CVE-2022-25766
Published: 2022-03-21
Description: The package ungit before 1.5.20 are vulnerable to Remote Code Execution (RCE) via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values (remote and ref) are passed to the git fetch command. By injecting some git options it was possible to get arbitrary command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: https://github.com/FredrikNoren/ungit/blob/master/CHANGELOG.md%231520; https://github.com/FredrikNoren/ungit/pull/1510; https://snyk.io/vuln/SNYK-JS-UNGIT-2414099
CVE: CVE-2021-24905
Published: 2022-03-21
Description: The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and does not validate the file to be deleted, allowing any authenticated user to delete arbitrary files on the web server. For example, removing the wp-config.php allows attackers to trigger WordPress setup again, gain administrator privileges and execute arbitrary code or display arbitrary content to the users.
CVSS Score: 8.0 (HIGH)
CWE: CWE-863, CWE-352
References: https://wpscan.com/vulnerability/cf[PII_REDACTED]-4b95-913b-802186766ae6; https://wpscan.com/vulnerability/cf[PII_REDACTED]-4b95-913b-802186766ae6
CVE: CVE-2021-25019
Published: 2022-03-21
Description: The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/cea0ce4b-886a-47cc-8653-a297e9759d09; https://wpscan.com/vulnerability/cea0ce4b-886a-47cc-8653-a297e9759d09
CVE: CVE-2022-0229
Published: 2022-03-21
Description: The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the reconfigureMethod, and does not validate the parameters passed to it properly. As a result, unauthenticated users could delete arbitrary options from the blog, making it unusable.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/d70c5335-4c01-448d-85fc-f8e75b104351; https://wpscan.com/vulnerability/d70c5335-4c01-448d-85fc-f8e75b104351
CVE: CVE-2022-0364
Published: 2022-03-21
Description: The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0eb40cd5-838e-4b53-994d-22cf7c8a6c50; https://wpscan.com/vulnerability/0eb40cd5-838e-4b53-994d-22cf7c8a6c50
CVE: CVE-2022-0423
Published: 2022-03-21
Description: The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7dde0b9d-9b86-4961-b005-a11b6ffba952; https://wpscan.com/vulnerability/7dde0b9d-9b86-4961-b005-a11b6ffba952
CVE: CVE-2022-0514
Published: 2022-03-21
Description: Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-840
References: https://github.com/crater-invoice/crater/commit/fadef0ea07d2f7fb3f41c2cae444ebca2f479679; https://huntr.dev/bounties/af08000d-9f4a-4743-865d-5d5cdaf7fb27; https://github.com/crater-invoice/crater/commit/fadef0ea07d2f7fb3f41c2cae444ebca2f479679
CVE: CVE-2022-0515
Published: 2022-03-21
Description: Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/crater-invoice/crater/commit/2b7028b7c83fd6e8897f244a2e6723baa20479e5; https://huntr.dev/bounties/efb93f1f-1896-4a4c-a059-9ecadac1c4de; https://github.com/crater-invoice/crater/commit/2b7028b7c83fd6e8897f244a2e6723baa20479e5
CVE: CVE-2022-0590
Published: 2022-03-21
Description: The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/08b66b69-3c69-4a1e-9c0a-5697e31bc04e; https://wpscan.com/vulnerability/08b66b69-3c69-4a1e-9c0a-5697e31bc04e
CVE: CVE-2022-0591
Published: 2022-03-21
Description: The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://wpscan.com/vulnerability/b5303e63-d640-4178-9237-d0f524b13d47; https://wpscan.com/vulnerability/b5303e63-d640-4178-9237-d0f524b13d47
CVE: CVE-2022-0616
Published: 2022-03-21
Description: The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/7c63d76e-34ca-4778-8784-437d446c16e0; https://wpscan.com/vulnerability/7c63d76e-34ca-4778-8784-437d446c16e0
CVE: CVE-2022-0627
Published: 2022-03-21
Description: The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fd8c720a-a94a-438f-b686-3a734e3c24e4; https://wpscan.com/vulnerability/fd8c720a-a94a-438f-b686-3a734e3c24e4
CVE: CVE-2022-0628
Published: 2022-03-21
Description: The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2684307; https://wpscan.com/vulnerability/af9787ee-c496-4f02-a22c-c8f8a97ad902; https://plugins.trac.wordpress.org/changeset/2684307
CVE: CVE-2022-0640
Published: 2022-03-21
Description: The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2684253; https://wpscan.com/vulnerability/f8405e06-9cf3-4acb-aebb-e80fb402daa9; https://plugins.trac.wordpress.org/changeset/2684253
CVE: CVE-2022-0681
Published: 2022-03-21
Description: The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/c5[PII_REDACTED]-4c14-a847-044248ada0ef; https://wpscan.com/vulnerability/c5[PII_REDACTED]-4c14-a847-044248ada0ef
CVE: CVE-2022-0687
Published: 2022-03-21
Description: The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amelia Manager" role.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://wpscan.com/vulnerability/3cf05815-9b74-4491-a935-d69a0834146c; https://wpscan.com/vulnerability/3cf05815-9b74-4491-a935-d69a0834146c
CVE: CVE-2022-0694
Published: 2022-03-21
Description: The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL statement via the abc_booking_getSingleCalendar AJAX action (available to both unauthenticated and authenticated users), leading to an unauthenticated SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2682086; https://wpscan.com/vulnerability/990d1b0a-dbd1-42d0-9a40-c345407c6fe0; https://plugins.trac.wordpress.org/changeset/2682086
CVE: CVE-2022-0739
Published: 2022-03-21
Description: The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2684789; https://wpscan.com/vulnerability/388cd42d-b61a-42a4-8604-99b812db2357; https://plugins.trac.wordpress.org/changeset/2684789
CVE: CVE-2022-0747
Published: 2022-03-21
Description: The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the post_id parameter before using it in a SQL statement via the qcld_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL Injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2684336; https://wpscan.com/vulnerability/a8575322-c2cf-486a-9c37-71a22167aac3; https://plugins.trac.wordpress.org/changeset/2684336
CVE: CVE-2022-0760
Published: 2022-03-21
Description: The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the post_id parameter before using it in a SQL statement via the qcopd_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL Injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2684915; https://wpscan.com/vulnerability/1c83ed73-ef02-45c0-a9ab-68a3468d2210; https://plugins.trac.wordpress.org/changeset/2684915
CVE: CVE-2022-24766
Published: 2022-03-21
Description: mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of another request/response's HTTP message body. While mitmproxy would only see one request, the target server would see multiple requests. A smuggled request is still captured as part of another request's body, but it does not appear in the request list and does not go through the usual mitmproxy event hooks, where users may have implemented custom access control checks or input sanitization. Unless mitmproxy is used to protect an HTTP/1 service, no action is required. The vulnerability has been fixed in mitmproxy 8.0.0 and above. There are currently no known workarounds.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-444, CWE-444
References: https://github.com/mitmproxy/mitmproxy/commit/b06fb6d157087d526bd02e7aadbe37c56865c71b; https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-gcx2-gvj7-pxv3; https://mitmproxy.org/posts/releases/mitmproxy8/
CVE: CVE-2022-24775
Published: 2022-03-21
Description: guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currently no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/guzzle/psr7/pull/485/commits/e55afaa3fc138c89adf3b55a8ba20dc60d17f1f1; https://github.com/guzzle/psr7/pull/486/commits/9a96d9db668b485361ed9de7b5bf1e54895df1dc; https://github.com/guzzle/psr7/security/advisories/GHSA-q7rv-6hp3-vh96
CVE: CVE-2021-46390
Published: 2022-03-21
Description: An access control issue in the authentication module of Lexar_F35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service (DoS). An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information related to the password of the registered user. The secure USB flash drive transmits the password entered by the user to the authentication module in the drive after the user registers a password, and then the input password is compared with the registered password stored in the authentication module. Subsequently, the module returns the comparison result for the authentication decision. Therefore, an attacker can bypass password authentication by analyzing the functions that return the password verification or comparison results and manipulate the authentication result values. Accordingly, even if attackers enter an incorrect password, they can be authenticated as a legitimate user and can therefore exploit functions of the secure USB flash drive by manipulating the authentication result values.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-fcqg-mq6w-h3fh; https://www.amazon.in/Lexar-LJDF35-128BNL-JumpDrive-Fingerprint-Silver/dp/B07GSMSL28/ref=sr_1_2?crid=37UZOWDJDLMIP&keywords=Lexar_F35&qid=[PII_REDACTED]&s=computers&sprefix=lexar_f3%2Ccomputers%2C311&sr=1-2; https://www.ebay.com/itm/[PII_REDACTED]12?hash=item3dc618a61c:g:YO0AAOSwoPJeNNQN
CVE: CVE-2022-23345
Published: 2022-03-21
Description: BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://bigant.com; https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-23345; https://www.bigantsoft.com/
CVE: CVE-2022-23346
Published: 2022-03-21
Description: BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://bigant.com; https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-23346; https://www.bigantsoft.com/
CVE: CVE-2022-23347
Published: 2022-03-21
Description: BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://bigant.com; https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-23347; https://www.bigantsoft.com/
CVE: CVE-2022-23348
Published: 2022-03-21
Description: BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-916
References: http://bigant.com; https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-23348; https://www.bigantsoft.com/
CVE: CVE-2022-23349
Published: 2022-03-21
Description: BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://bigant.com; https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-23349; https://www.bigantsoft.com/
CVE: CVE-2022-23350
Published: 2022-03-21
Description: BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://bigant.com; https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-23350; https://www.bigantsoft.com/
CVE: CVE-2022-23352
Published: 2022-03-21
Description: An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://bigant.com; https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-23352; https://www.bigantsoft.com/
CVE: CVE-2022-26148
Published: 2022-03-21
Description: An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312
References: https://2k8.org/post-319.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://2k8.org/post-319.html
CVE: CVE-2021-38745
Published: 2022-03-21
Description: Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-81-2021-07-26-High-impact-Low-risk-Zero-Code-RCE-in-admin; https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-81-2021-07-26-High-impact-Low-risk-Zero-Code-RCE-in-admin
CVE: CVE-2021-40662
Published: 2022-03-21
Description: A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://febin0x4e4a.wordpress.com/2022/03/22/cve-2021-40662-chamilo-lms-1-11-14-rce/; https://febinj.medium.com/cve-2021-40662-chamilo-lms-1-11-14-rce-5301bad245d7; https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-83-2021-08-11-High-impact-Moderate-risk-Cross-Site-Request-Forgery-CSRF-leading-to-Remote-Code-Execution
CVE: CVE-2022-26174
Published: 2022-03-21
Description: A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: https://github.com/beekeeper-studio/beekeeper-studio/issues/1051; https://github.com/beekeeper-studio/beekeeper-studio/issues/1051
CVE: CVE-2022-26183
Published: 2022-03-21
Description: PNPM v6.15.1 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute PNPM commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426
References: https://github.com/pnpm/pnpm/commit/04b7f60861ddee8331e50d70e193d1e701abeefb; https://github.com/pnpm/pnpm/releases/tag/v6.15.1; https://www.sonarsource.com/blog/securing-developer-tools-package-managers/
CVE: CVE-2022-26184
Published: 2022-03-21
Description: Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-426
References: https://github.com/python-poetry/poetry-core/pull/205/commits/fa9cb6f358ae840885c700f954317f34838caba7; https://github.com/python-poetry/poetry/releases/tag/1.1.9; https://www.sonarsource.com/blog/securing-developer-tools-package-managers/
CVE: CVE-2022-27090
Published: 2022-03-21
Description: Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://gitee.com/shenshaoqing/cms/issues/I4X3F9; https://gitee.com/shenshaoqing/cms/issues/I4X3F9
CVE: CVE-2022-27333
Published: 2022-03-21
Description: idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data.
CVSS Score: 7.5 (HIGH)
References: https://github.com/Cutegod/idcCMS/issues/1; https://github.com/Cutegod/idcCMS/issues/1
CVE: CVE-2022-26283
Published: 2022-03-21
Description: Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dir0x/Multiple-SQLi-in-Simple-Subscription-Company/blob/main/view_plan_sqli.py; https://github.com/Dir0x/Multiple-SQLi-in-Simple-Subscription-Company/blob/main/view_plan_sqli.py