deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20393
Published: 2022-09-13
Description: In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure from the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-233735886
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-191
References: https://source.android.com/security/bulletin/2022-09-01; https://source.android.com/security/bulletin/2022-09-01
CVE: CVE-2022-20395
Published: 2022-09-13
Description: In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-221855295
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://source.android.com/security/bulletin/2022-09-01; https://source.android.com/security/bulletin/2022-09-01
CVE: CVE-2022-20396
Published: 2022-09-13
Description: In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction, due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-234440688
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-345
References: https://source.android.com/security/bulletin/2022-09-01; https://source.android.com/security/bulletin/2022-09-01
CVE: CVE-2022-20398
Published: 2022-09-13
Description: In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-221859734
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://source.android.com/security/bulletin/2022-09-01; https://source.android.com/security/bulletin/2022-09-01
CVE: CVE-2022-20399
Published: 2022-09-13
Description: In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local information disclosure of network data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-219808546References: Upstream kernel
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://source.android.com/security/bulletin/2022-09-01; https://source.android.com/security/bulletin/2022-09-01
CVE: CVE-2022-2962
Published: 2022-09-13
Description: A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn't check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times, possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400, CWE-662
References: https://gitlab.com/qemu-project/qemu/-/commit/36a894aeb64a2e02871016da1c37d4a4ca109182; https://gitlab.com/qemu-project/qemu/-/issues/1171; https://gitlab.com/qemu-project/qemu/-/commit/36a894aeb64a2e02871016da1c37d4a4ca109182
CVE: CVE-2022-32244
Published: 2022-09-13
Description: Under certain conditions an attacker authenticated as a CMS administrator access the BOE Commentary database and retrieve (non-personal) system data, modify system data but can't make the system unavailable. This needs the attacker to have high privilege access to the same physical/logical network to access information which would otherwise be restricted, leading to low impact on confidentiality and high impact on integrity of the application.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/3213524; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3213524
CVE: CVE-2022-32555
Published: 2022-09-13
Description: Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=69; https://unisys.com; https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=69
CVE: CVE-2022-37703
Published: 2022-09-13
Description: In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists or not anywhere in the fs. The binary will use `opendir()` as root directly without checking the path, letting the attacker provide an arbitrary path.
CVSS Score: 3.3 (LOW)
CWE: CWE-22
References: http://www.amanda.org/; https://bugs.gentoo.org/870037; https://github.com/MaherAzzouzi/CVE-2022-37703
CVE: CVE-2022-38342
Published: 2022-09-13
Description: Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks.
CVSS Score: 8.5 (HIGH)
CWE: CWE-611
References: https://community.safe.com/s/article/Known-Issue-FME-Server-XXE-vulnerability-via-adding-a-repository-item; https://www.cycura.com/blog/safe-software-inc-fme-server-vulnerability-disclosure/; https://community.safe.com/s/article/Known-Issue-FME-Server-XXE-vulnerability-via-adding-a-repository-item
CVE: CVE-2022-3182
Published: 2022-09-13
Description: Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock. This issue affects: Devolutions Remote Desktop Manager version 2022.2.14 and prior versions.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284
References: https://devolutions.net/security/advisories/DEVO-2022-0007; https://devolutions.net/security/advisories/DEVO-2022-0007
CVE: CVE-2022-3205
Published: 2022-09-13
Description: Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is susceptible to XSS injection
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/security/cve/CVE-2022-3205; https://bugzilla.redhat.com/show_bug.cgi?id=2120597; https://access.redhat.com/security/cve/CVE-2022-3205
CVE: CVE-2022-22329
Published: 2022-09-13
Description: IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 219124.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/219124; https://www.ibm.com/support/pages/node/6619739; https://exchange.xforce.ibmcloud.com/vulnerabilities/219124
CVE: CVE-2022-22330
Published: 2022-09-13
Description: IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 219126.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/219126; https://www.ibm.com/support/pages/node/6619739; https://exchange.xforce.ibmcloud.com/vulnerabilities/219126
CVE: CVE-2022-22483
Published: 2022-09-13
Description: IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/225979; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6618779
CVE: CVE-2022-34336
Published: 2022-09-13
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/229714; https://www.ibm.com/support/pages/node/6619699; https://exchange.xforce.ibmcloud.com/vulnerabilities/229714
CVE: CVE-2022-34356
Published: 2022-09-13
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502.
CVSS Score: 7.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230502; https://www.ibm.com/support/pages/node/6619721; https://exchange.xforce.ibmcloud.com/vulnerabilities/230502
CVE: CVE-2022-35637
Published: 2022-09-13
Description: IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statement into the Db2expln tool. IBM X-Force ID: 230823.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230823; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6618775
CVE: CVE-2022-36768
Published: 2022-09-13
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014.
CVSS Score: 7.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/232014; https://www.ibm.com/support/pages/node/6619725; https://exchange.xforce.ibmcloud.com/vulnerabilities/232014
CVE: CVE-2022-38306
Published: 2022-09-13
Description: LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/lief-project/LIEF/issues/763; https://github.com/lief-project/LIEF/issues/763
CVE: CVE-2022-38307
Published: 2022-09-13
Description: LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/lief-project/LIEF/issues/764; https://github.com/lief-project/LIEF/issues/764
CVE: CVE-2022-38329
Published: 2022-09-13
Description: A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, potentially causing the administrator to perform unintended actions on an affected system. The vulnerability could allow attackers to modify or delete specific content through crafted requests, potentially leading to data loss and system integrity issues.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://albert5888.github.io/posts/CVE-2022-38329/; https://github.com/zhangqiquan/shopxian_cms/issues/4; https://albert5888.github.io/posts/CVE-2022-38329/
CVE: CVE-2022-38495
Published: 2022-09-13
Description: LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/lief-project/LIEF/issues/767; https://github.com/lief-project/LIEF/issues/767
CVE: CVE-2022-38496
Published: 2022-09-13
Description: LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/lief-project/LIEF/issues/765; https://github.com/lief-project/LIEF/issues/765
CVE: CVE-2022-38497
Published: 2022-09-13
Description: LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/lief-project/LIEF/issues/766; https://github.com/lief-project/LIEF/issues/766
CVE: CVE-2022-38637
Published: 2022-09-13
Description: Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on the Login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://owasp.org/www-community/attacks/SQL_Injection; https://www.youtube.com/watch?v=m8nW0p69UHU; https://owasp.org/www-community/attacks/SQL_Injection
CVE: CVE-2022-39814
Published: 2022-09-13
Description: In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-39815
Published: 2022-09-13
Description: In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This vulnerability allow unauthenticated users to execute commands on the operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-39816
Published: 2022-09-13
Description: In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page. Exploitation requires an authenticated attacker.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-39817
Published: 2022-09-13
Description: In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker. Through the injection of arbitrary SQL statements, a potential authenticated attacker can modify query syntax and perform unauthorized (and unexpected) operations against the remote database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-39819
Published: 2022-09-13
Description: In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-39821
Published: 2022-09-13
Description: In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-40621
Published: 2022-09-13
Description: Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient network access to capture the hashed password of a logged on user and use it in a classic Pass-the-Hash style attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-294, CWE-294
References: https://www.malbytes.net/2022/07/wavlink-quantum-d4g-zero-day-part-01.html; https://www.malbytes.net/2022/07/wavlink-quantum-d4g-zero-day-part-01.html
CVE: CVE-2022-40622
Published: 2022-09-13
Description: The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-304, CWE-287
References: https://youtu.be/cSileV8YbsQ?t=655; https://youtu.be/cSileV8YbsQ?t=655
CVE: CVE-2022-40623
Published: 2022-09-13
Description: The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://youtu.be/cSileV8YbsQ?t=1028; https://youtu.be/cSileV8YbsQ?t=1028
CVE: CVE-2021-36568
Published: 2022-09-13
Description: In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with the type "Text" where its values "Field name" and "Field description" are vulnerable to Cross Site Scripting Stored(XSS). This affects Moodle 3.11 and Moodle 3.10.4 and Moodle 3.9.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.hackingforce.com.br/en/cve-2021-36568/; https://drive.google.com/drive/folders/1_fO4BKpmD3avGYHSzvIXWs5owqVYgB1s?usp=sharing; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERQ3NHVOK4ZXT4MS4LBQ2ZJHTON3LIMW/
CVE: CVE-2022-31322
Published: 2022-09-13
Description: Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb; https://www.pentasecurity.com/product/wapples/; https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb
CVE: CVE-2022-31324
Published: 2022-09-13
Description: An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-494
References: https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb; https://www.pentasecurity.com/product/wapples/; https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb
CVE: CVE-2022-31861
Published: 2022-09-13
Description: Cross site Scripting (XSS) in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://securityblog101.blogspot.com/2022/09/cve-2022-31861.html; https://securityblog101.blogspot.com/2022/09/cve-2022-31861.html
CVE: CVE-2022-34101
Published: 2022-09-13
Description: A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL in a certain path to execute code and preform a privilege escalation attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.crestron.com/Security/Security_Advisories; https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf; https://www.crestron.com/Security/Security_Advisories
CVE: CVE-2022-34102
Published: 2022-09-13
Description: Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can pause the uninstallation of an executable to gain a SYSTEM level command prompt.
CVSS Score: 8.8 (HIGH)
References: https://www.crestron.com/Security/Security_Advisories; https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf; https://www.crestron.com/Security/Security_Advisories
CVE: CVE-2022-35413
Published: 2022-09-13
Description: WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information (such as SSL keys) via an HTTPS request to the /webapi/ URI on port 443 or 5001.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://azuremarketplace.microsoft.com/en/marketplace/apps/penta-security-systems-inc.wapples_sa_v6?tab=Overview; https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb; https://www.pentasecurity.com/product/wapples/
CVE: CVE-2022-35582
Published: 2022-09-13
Description: Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its existence, is not disclosed in the documentation. Knowing the credentials, attackers can use this feature to gain uncontrolled access to the device and therefore are considered an undocumented possibility for remote control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb; https://www.pentasecurity.com/product/wapples/; https://medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb
CVE: CVE-2022-38633
Published: 2022-09-13
Description: Genymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows attackers to escalate privileges and execute arbitrary code via a crafted binary.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://github.com/SaumyajeetDas/Vulnerability/blob/main/Genymotion/GenymotionDesktop.md; https://github.com/SaumyajeetDas/Vulnerability/blob/main/Genymotion/GenymotionDesktop.md
CVE: CVE-2022-37190
Published: 2022-09-13
Description: CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/api/index.php.
CVSS Score: 8.8 (HIGH)
References: https://github.com/CuppaCMS/CuppaCMS/issues/22; https://github.com/badru8612/Authenticated-RCE-CuppaCMS; https://github.com/CuppaCMS/CuppaCMS/issues/22
CVE: CVE-2022-37191
Published: 2022-09-13
Description: The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using [function] parameter value as LFI payload.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-829
References: https://github.com/CuppaCMS/CuppaCMS/issues/20; https://github.com/badru8612/CuppaCMS-Authenticated-LFI-Vulnerability; https://github.com/CuppaCMS/CuppaCMS/issues/20
CVE: CVE-2022-38305
Published: 2022-09-13
Description: AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/MegaTKC/AeroCMS/issues/3; https://github.com/MegaTKC/AeroCMS/issues/3
CVE: CVE-2022-38768
Published: 2022-09-13
Description: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to bypass authorization.
CVSS Score: 9.8 (CRITICAL)
References: https://mojodat-vulnerabilities.netlify.app/; https://transtek.com/mojodat-fixed-assets/; https://mojodat-vulnerabilities.netlify.app/
CVE: CVE-2022-38769
Published: 2022-09-13
Description: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request.
CVSS Score: 7.5 (HIGH)
References: https://mojodat-vulnerabilities.netlify.app/; https://transtek.com/mojodat-fixed-assets/; https://mojodat-vulnerabilities.netlify.app/