deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-35897
Published: 2022-11-21
Description: An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the attacker modifies specific UEFI variables, it can cause a stack overflow, leading to arbitrary code execution. The specific variables are normally locked (read-only) at the OS level and therefore an attack would require direct SPI modification. If an attacker can change the values of at least two variables out of three (SecureBootEnforce, SecureBoot, RestoreBootSettings), it is possible to execute arbitrary code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022041; https://www.insyde.com/security-pledge
CVE: CVE-2022-38755
Published: 2022-11-21
Description: A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prior to 4.3.1.1.
CVSS Score: 5.3 (MEDIUM)
References: https://portal.microfocus.com/s/article/KM000011886?language=en_US; https://portal.microfocus.com/s/article/KM000011886?language=en_US
CVE: CVE-2022-45422
Published: 2022-11-21
Description: When LG SmartShare is installed, local privilege escalation is possible through DLL Hijacking attack. The LG ID is LVE-HOT-220005.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://lgsecurity.lge.com/bulletins/pc; https://lgsecurity.lge.com/bulletins/pc
CVE: CVE-2022-40746
Published: 2022-11-21
Description: IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system.  IBM X-Force ID:  236581.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77, CWE-427
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/236581; https://www.ibm.com/support/pages/node/6840359; https://exchange.xforce.ibmcloud.com/vulnerabilities/236581
CVE: CVE-2022-43117
Published: 2022-11-21
Description: Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Name, Username, Description and Site Feature parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://drive.google.com/file/d/1ZmAuKMVzUpL8pt5KXQJk8IyPECoVP9xw/view?usp=sharing; https://github.com/RashidKhanPathan/CVE-2022-43117; https://drive.google.com/file/d/1ZmAuKMVzUpL8pt5KXQJk8IyPECoVP9xw/view?usp=sharing
CVE: CVE-2022-44171
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/fast_setting_wifi_set/Tenda_AC18_V15.03.05.19_Vuln_timeZone.md; https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/fast_setting_wifi_set/Tenda_AC18_V15.03.05.19_Vuln_timeZone.md
CVE: CVE-2022-44172
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/R7WebsSecurityHandler/Tenda_AC18_V15.03.05.19_Vuln_password.md; https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/R7WebsSecurityHandler/Tenda_AC18_V15.03.05.19_Vuln_password.md
CVE: CVE-2022-44174
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/formSetDeviceName_05/Tenda_AC18_V15.03.05.05_Vuln_devName.md; https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/formSetDeviceName_05/Tenda_AC18_V15.03.05.05_Vuln_devName.md
CVE: CVE-2022-44175
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/formSetMacFilterCfg/readme.md; https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/formSetMacFilterCfg/readme.md
CVE: CVE-2022-44176
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/fromSetRouteStatic; https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/fromSetRouteStatic
CVE: CVE-2022-44177
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/formWifiWpsStart; https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/formWifiWpsStart
CVE: CVE-2022-44178
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/formWifiWpsOOB; https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/formWifiWpsOOB
CVE: CVE-2022-44180
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/addWifiMacFilter; https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/addWifiMacFilter
CVE: CVE-2022-44183
Published: 2022-11-21
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/formSetWifiGuestBasic; https://github.com/RobinWang825/IoT_vuln/tree/main/Tenda/AC18/formSetWifiGuestBasic
CVE: CVE-2022-44830
Published: 2022-11-21
Description: Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236, CWE-1236
References: https://github.com/RashidKhanPathan/CVE-2022-44830; https://github.com/RashidKhanPathan/CVE-2022-44830
CVE: CVE-2022-3388
Published: 2022-11-21
Description: An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA
Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&Action=Launch&elqaid=4293&elqat=1; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&Action=Launch&elqaid=4293&elqat=1
CVE: CVE-2022-4105
Published: 2022-11-21
Description: A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/kiwitcms/kiwi/commit/a2b169ffdef1d7c1755bade[PII_REDACTED]b35011b; https://huntr.dev/bounties/386417e9-0cd5-4d80-8137-b0fd5c30b8f8; https://github.com/kiwitcms/kiwi/commit/a2b169ffdef1d7c1755bade[PII_REDACTED]b35011b
CVE: CVE-2020-23582
Published: 2022-11-21
Description: A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to create Multiple WLAN BSSID.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/huzaifahussain98/CVE-2020-23582; https://github.com/huzaifahussain98/CVE-2020-23582
CVE: CVE-2022-42096
Published: 2022-11-21
Description: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://backdropcms.org; https://github.com/backdrop/backdrop/releases/tag/1.23.0; https://github.com/bypazs/CVE-2022-42096
CVE: CVE-2022-43143
Published: 2022-11-21
Description: A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/beekeeper-studio/beekeeper-studio/issues/1393; https://github.com/beekeeper-studio/beekeeper-studio/issues/1393
CVE: CVE-2022-30257
Published: 2022-11-21
Description: An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-706, CWE-706
References: https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81; https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81
CVE: CVE-2022-30258
Published: 2022-11-21
Description: An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-706, CWE-706
References: https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81; https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-81
CVE: CVE-2022-41945
Published: 2022-11-21
Description: super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ​​into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://github.com/4ra1n/super-xray/releases/tag/0.2-beta; https://github.com/4ra1n/super-xray/security/advisories/GHSA-732j-763p-cvqg; https://github.com/4ra1n/super-xray/releases/tag/0.2-beta
CVE: CVE-2022-44784
Published: 2022-11-21
Description: An issue was discovered in Appalti & Contratti 9.12.2. The target web applications LFS and DL229 expose a set of services provided by the Axis 1.4 instance, embedded directly into the applications, as hinted by the WEB-INF/web.xml file leaked through Local File Inclusion. Among the exposed services, there is the Axis AdminService, which, through the default configuration, should normally be accessible only by the localhost. Nevertheless, by trying to access the mentioned service, both in LFS and DL229, the service can actually be reached even by remote users, allowing creation of arbitrary services on the server side. When an attacker can reach the AdminService, they can use it to instantiate arbitrary services on the server. The exploit procedure is well known and described in Generic AXIS-SSRF exploitation. Basically, the attack consists of writing a JSP page inside the root directory of the web application, through the org.apache.axis.handlers.LogHandler class.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/; https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE: CVE-2022-44785
Published: 2022-11-21
Description: An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/; https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE: CVE-2022-44786
Published: 2022-11-21
Description: An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href parameter to specify the JSP page to be rendered. This affects ApriPagina.do POST and GET requests to each application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98
References: https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/; https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE: CVE-2022-44787
Published: 2022-11-21
Description: An issue was discovered in Appalti & Contratti 9.12.2. The web applications are vulnerable to a Reflected Cross-Site Scripting issue. The idPagina parameter is reflected inside the server response without any HTML encoding, resulting in XSS when the victim moves the mouse pointer inside the page. As an example, the onmouseenter attribute is not sanitized.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/; https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE: CVE-2022-44788
Published: 2022-11-21
Description: An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESSIONID cookie that is issued by the server at the first visit, the cookie value is not updated after a successful login.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384, CWE-384
References: https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/; https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/
CVE: CVE-2022-43707
Published: 2022-11-22
Description: MyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attackers to inject HTML via user input or stored data
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/mybb/mybb/security/advisories/GHSA-6vpw-m83q-27px; https://mybb.com; https://github.com/mybb/mybb/security/advisories/GHSA-6vpw-m83q-27px
CVE: CVE-2022-43708
Published: 2022-11-22
Description: MyBB 1.8.31 has a (issue 2 of 2) cross-site scripting (XSS) vulnerabilities in the post Attachments interface allow attackers to inject HTML by persuading the user to upload a file with specially crafted name
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/mybb/mybb/security/advisories/GHSA-p9m7-9qv4-x93w; https://mybb.com; https://github.com/mybb/mybb/security/advisories/GHSA-p9m7-9qv4-x93w
CVE: CVE-2022-43709
Published: 2022-11-22
Description: MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89, CWE-79
References: https://github.com/mybb/mybb/security/advisories/GHSA-ggp5-454p-867v; https://mybb.com; https://github.com/mybb/mybb/security/advisories/GHSA-ggp5-454p-867v
CVE: CVE-2022-30529
Published: 2022-11-22
Description: File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to upload arbitrary files via /system/application/libs/js/tinymce/plugins/filemanager/dialog.php and /system/application/libs/js/tinymce/plugins/filemanager/upload.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/asith-eranga/isic; https://github.com/killmonday/isic.lk-RCE; https://github.com/asith-eranga/isic
CVE: CVE-2022-36179
Published: 2022-11-22
Description: Fusiondirectory 1.3 suffers from Improper Session Handling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613, CWE-613
References: http://fusiondirectory.com; https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html; https://yoroi.company/research/cve-advisory-full-disclosure-multiple-vulnerabilities/
CVE: CVE-2022-36180
Published: 2022-11-22
Description: Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout=1&message=[injection]&plug=106.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: http://fusiondirectory.com; https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html; https://yoroi.company/research/cve-advisory-full-disclosure-multiple-vulnerabilities/
CVE: CVE-2022-40765
Published: 2022-11-22
Description: A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0007; https://www.mitel.com/support/security-advisories
CVE: CVE-2022-40842
Published: 2022-11-22
Description: ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: http://ndkadvancedcustomizationfields.com; https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40842/poc.txt; http://ndkadvancedcustomizationfields.com
CVE: CVE-2022-41223
Published: 2022-11-22
Description: The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008; https://www.mitel.com/support/security-advisories
CVE: CVE-2022-41326
Published: 2022-11-22
Description: The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0009; https://www.mitel.com/support/security-advisories
CVE: CVE-2022-41936
Published: 2022-11-22
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The `modifications` rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unauthorized users are exposed though the `modifications` rest endpoint (comments and page names etc). Users should upgrade to XWiki 14.6+, 14.4.3+, or 13.10.8+. Older versions have not been patched. There are no known workarounds.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-359
References: https://github.com/xwiki/xwiki-platform/commit/38dc1aa1a4435f24d58f5b8e4566cbcb0971f8ff; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p88w-fhxw-xvcc; https://jira.xwiki.org/browse/XWIKI-19997
CVE: CVE-2022-41937
Published: 2022-11-22
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The application allows anyone with view access to modify any page of the wiki by importing a crafted XAR package. The problem has been patched in XWiki 14.6RC1, 14.6 and 13.10.8. As a workaround, setting the right of the page Filter.WebHome and making sure only the main wiki administrators can view the application installed on main wiki or edit the page and apply the changed described in commit fb49b4f.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-862
References: https://github.com/xwiki/xwiki-platform/commit/fb49b4f289ee28e45cfada8e97e320cd3ed27113; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-q6jp-gcww-8v2j; https://jira.xwiki.org/browse/XWIKI-19758
CVE: CVE-2022-41940
Published: 2022-11-22
Description: Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io package, including those who uses depending packages like socket.io. There is no known workaround except upgrading to a safe version. There are patches for this issue released in versions 3.6.1 and 6.2.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-248
References: https://github.com/socketio/engine.io/commit/425e833ab13373edf1dd5a0706f07100db14e3c6; https://github.com/socketio/engine.io/commit/83c4071af871fc188298d7d591e95670bf9f9085; https://github.com/socketio/engine.io/security/advisories/GHSA-r7qp-cfhv-p84w
CVE: CVE-2022-43214
Published: 2022-11-22
Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43214%28sql%20in%20printOrder.php%29.md; https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html; https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43214%28sql%20in%20printOrder.php%29.md
CVE: CVE-2022-43215
Published: 2022-11-22
Description: Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43215%28sql%20in%20getOrderReport.php%29.md; https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html; https://github.com/Qrayyy/CVE/blob/main/Billing%20System%20Project%20v1.0/CVE-2022-43215%28sql%20in%20getOrderReport.php%29.md
CVE: CVE-2022-43685
Published: 2022-11-22
Description: CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://ckan.org/; https://ckan.org/blog/get-latest-patch-releases-your-ckan-site-october-2022; https://ckan.org/
CVE: CVE-2022-35407
Published: 2022-11-22
Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver on Intel platforms. An attacker can change the values of certain UEFI variables. If the size of the second variable exceeds the size of the first, then the buffer will be overwritten. This issue affects the SetupUtility driver of InsydeH2O.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022040; https://www.insyde.com/security-pledge