deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-25003
Published: 2022-03-14
Description: The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-434
References: https://wpscan.com/vulnerability/5c21ad35-b2fb-4a51-858f-8ffff685de4a; https://wpscan.com/vulnerability/5c21ad35-b2fb-4a51-858f-8ffff685de4a
CVE: CVE-2021-25006
Published: 2022-03-14
Description: The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/dbe2c6ca-d2f1-40a2-83d5-4623c22d4d61; https://wpscan.com/vulnerability/dbe2c6ca-d2f1-40a2-83d5-4623c22d4d61
CVE: CVE-2021-25007
Published: 2022-03-14
Description: The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/cf907d53-cc4a-4b02-bed3[PII_REDACTED]2c; https://wpscan.com/vulnerability/cf907d53-cc4a-4b02-bed3[PII_REDACTED]2c
CVE: CVE-2021-25026
Published: 2022-03-14
Description: The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2682069; https://wpscan.com/vulnerability/02756dd3-832a-4846-b9e1-a34f148b5cfe; https://plugins.trac.wordpress.org/changeset/2682069
CVE: CVE-2021-41952
Published: 2022-03-14
Description: Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals victim's cookie leads to account takeover. The person viewing the image of a contact can be victim of XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/hieuminhnv/Zenario-CMS-9.0-last-version/issues/1; https://github.com/hieuminhnv/Zenario-CMS-9.0-last-version/issues/1
CVE: CVE-2021-42171
Published: 2022-03-14
Description: Zenario CMS 9.0.54156 is vulnerable to File Upload. The web server can be compromised by uploading and executing a web-shell which can run commands, browse system files, browse local resources, attack other servers, and exploit the local vulnerabilities, and so forth.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166617/Zenario-CMS-9.0.54156-Remote-Code-Execution.html; https://github.com/hieuminhnv/Zenario-CMS-9.0-last-version/issues/2; https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74
CVE: CVE-2021-44964
Published: 2022-03-14
Description: Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-416
References: http://lua-users.org/lists/lua-l/2021-11/msg00186.html; http://lua-users.org/lists/lua-l/2021-12/msg00007.html; http://lua-users.org/lists/lua-l/2021-12/msg00015.html
CVE: CVE-2022-0147
Published: 2022-03-14
Description: The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2681371; https://wpscan.com/vulnerability/2c735365-69c0-4652-b48e-c4a192dfe0d1; https://plugins.trac.wordpress.org/changeset/2681371
CVE: CVE-2022-0161
Published: 2022-03-14
Description: The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2680993; https://wpscan.com/vulnerability/6b37fa17-0dcb-47a7-b1eb-f9f6abb458c0; https://plugins.trac.wordpress.org/changeset/2680993
CVE: CVE-2022-0165
Published: 2022-03-14
Description: The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/906d0c31-370e-46b4-af1f-e52fbddd00cb; https://wpscan.com/vulnerability/906d0c31-370e-46b4-af1f-e52fbddd00cb
CVE: CVE-2022-0169
Published: 2022-03-14
Description: The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2672822/photo-gallery#file9; https://wpscan.com/vulnerability/0b4d870f-eab8-4544-91f8-9c5f0538709c; https://plugins.trac.wordpress.org/changeset/2672822/photo-gallery#file9
CVE: CVE-2022-0230
Published: 2022-03-14
Description: The Better WordPress Google XML Sitemaps WordPress plugin through 1.4.1 does not sanitise and escape its logs when outputting them in the admin dashboard, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c73316d2-ae6a-42db-935b-b8b03a7e4363; https://wpscan.com/vulnerability/c73316d2-ae6a-42db-935b-b8b03a7e4363
CVE: CVE-2022-0248
Published: 2022-03-14
Description: The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the malicious submission
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2682024; https://wpscan.com/vulnerability/d02cf542-2d75-46bc-a0df-67bbe501cc89; https://plugins.trac.wordpress.org/changeset/2682024
CVE: CVE-2022-0254
Published: 2022-03-14
Description: The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2660225; https://plugins.trac.wordpress.org/changeset/2680906; https://wpscan.com/vulnerability/ae54681f-7b89-408c-b0ee-ba4a520db997
CVE: CVE-2022-0321
Published: 2022-03-14
Description: The WP Voting Contest WordPress plugin before 3.0 does not sanitise and escape the post_id parameter before outputting it back in the response via the wpvc_social_share_icons AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/286b81a0-6f6d-4024-9bbc-6cb373990a7a; https://wpscan.com/vulnerability/286b81a0-6f6d-4024-9bbc-6cb373990a7a
CVE: CVE-2022-0327
Published: 2022-03-14
Description: The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the error_message parameter before outputting it back in the response of the jltma_restrict_content AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/df38cc99-da3c-4cc0-b179-1e52e841b883; https://wpscan.com/vulnerability/df38cc99-da3c-4cc0-b179-1e52e841b883
CVE: CVE-2022-0399
Published: 2022-03-14
Description: The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outputting it back in the berocket_apl_color_listener AJAX action's response, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2678919; https://wpscan.com/vulnerability/5e5fdcf4-ec2b-4e73-8009-05606b2d5164; https://plugins.trac.wordpress.org/changeset/2678919
CVE: CVE-2022-0449
Published: 2022-03-14
Description: The Flexi WordPress plugin before 4.20 does not sanitise and escape various parameters before outputting them back in some pages such as the user dashboard, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3cc1bb3c-e124-43d3-bc84-a493561a1387; https://wpscan.com/vulnerability/3cc1bb3c-e124-43d3-bc84-a493561a1387
CVE: CVE-2022-0478
Published: 2022-03-14
Description: The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the post_author_gutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role as low as contributor to perform SQL Injection attacks
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2671860; https://wpscan.com/vulnerability/d881d725-d06b-464f-a25e-88f41b1f431f; https://plugins.trac.wordpress.org/changeset/2671860
CVE: CVE-2022-0503
Published: 2022-03-14
Description: The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b6d38e23-3761-4447-a794-1e5077fd953a; https://wpscan.com/vulnerability/b6d38e23-3761-4447-a794-1e5077fd953a
CVE: CVE-2022-0593
Published: 2022-03-14
Description: The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugin directory, allowing unauthenticated user to remotely delete the plugin files leading to a potential Denial of Service situation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://wordpress.org/plugins/login-with-phone-number; https://wpscan.com/vulnerability/76a50157-04b5-43e8-afbc-a6ddf6d1cba3; https://wordpress.org/plugins/login-with-phone-number
CVE: CVE-2022-0601
Published: 2022-03-14
Description: The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2679245; https://wpscan.com/vulnerability/6ec62eae-2072-4098-8f77-b22d61a89cbf; https://plugins.trac.wordpress.org/changeset/2679245
CVE: CVE-2022-0648
Published: 2022-03-14
Description: The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/90f9ad6a-4855-4a8e-97f6-5f403eb6455d; https://wpscan.com/vulnerability/90f9ad6a-4855-4a8e-97f6-5f403eb6455d
CVE: CVE-2022-0658
Published: 2022-03-14
Description: The CommonsBooking WordPress plugin before 2.6.8 does not sanitise and escape the location parameter of the calendar_data AJAX action (available to unauthenticated users) before it is used in dynamically constructed SQL queries, leading to an unauthenticated SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/d7f0805a-61ce-454a-96fb-5ecacd767578; https://wpscan.com/vulnerability/d7f0805a-61ce-454a-96fb-5ecacd767578
CVE: CVE-2022-0659
Published: 2022-03-14
Description: The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/22dc2661-ba64-49e7-af65-892a617ab02c; https://wpscan.com/vulnerability/22dc2661-ba64-49e7-af65-892a617ab02c
CVE: CVE-2022-0674
Published: 2022-03-14
Description: The Kunze Law WordPress plugin before 2.1 does not escape its 'E-Mail Error "From" Address' settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/332e1e1e-7420-4605-99bc-4074e212ff9b; https://wpscan.com/vulnerability/332e1e1e-7420-4605-99bc-4074e212ff9b
CVE: CVE-2022-0684
Published: 2022-03-14
Description: The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2681478; https://wpscan.com/vulnerability/69b178f3-5951-4879-9bbe-183951d002ec; https://plugins.trac.wordpress.org/changeset/2681478
CVE: CVE-2022-0700
Published: 2022-03-14
Description: The Simple Tracking WordPress plugin before 1.7 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/1bf1f255-1571-425c-92b1-02833f6a44a7; https://wpscan.com/vulnerability/1bf1f255-1571-425c-92b1-02833f6a44a7
CVE: CVE-2022-0701
Published: 2022-03-14
Description: The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/68882f81-12d3-4e98-82ff-6754ac4ccfa1; https://wpscan.com/vulnerability/68882f81-12d3-4e98-82ff-6754ac4ccfa1
CVE: CVE-2022-0702
Published: 2022-03-14
Description: The Petfinder Listings WordPress plugin through 1.0.18 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/bf6f897b-af65-4122-802c-ae6d4f2346f9; https://wpscan.com/vulnerability/bf6f897b-af65-4122-802c-ae6d4f2346f9
CVE: CVE-2022-0703
Published: 2022-03-14
Description: The GD Mylist WordPress plugin through 1.1.1 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/fa34beff-c8ab-4297-9c59-b3b0c52f0536; https://wpscan.com/vulnerability/fa34beff-c8ab-4297-9c59-b3b0c52f0536
CVE: CVE-2022-0960
Published: 2022-03-14
Description: Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-79
References: https://github.com/star7th/showdoc/commit/92bc6a83a3a60e01a0d2effb98ab47d8d7eab28f; https://huntr.dev/bounties/462cd8a7-b1a9-4e93-af71-b56ba1d7ad4e; https://github.com/star7th/showdoc/commit/92bc6a83a3a60e01a0d2effb98ab47d8d7eab28f
CVE: CVE-2022-22734
Published: 2022-03-14
Description: The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a result, attacker could make a logged in admin create or edit arbitrary quote, and put Cross-Site Scripting payloads in them
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-116
References: https://wpscan.com/vulnerability/f6e15a23-8f8c-47c2-8227-e277856d8251; https://wpscan.com/vulnerability/f6e15a23-8f8c-47c2-8227-e277856d8251
CVE: CVE-2022-22735
Published: 2022-03-14
Description: The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenticated users, such as subscriber to perform SQL injection attacks
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/6940a97e-5a75-405c-be74-bedcc3a8ee00; https://wpscan.com/vulnerability/6940a97e-5a75-405c-be74-bedcc3a8ee00
CVE: CVE-2022-24577
Published: 2022-03-14
Description: GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.)
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://github.com/gpac/gpac/blob/105d67985ff3c3f4b98a98f312e3d84ae77a4463/share/doc/man/gpac.1#L2226-L2229; https://github.com/gpac/gpac/blob/105d67985ff3c3f4b98a98f312e3d84ae77a4463/src/utils/utf.c#L35-L59; https://huntr.dev/bounties/0758b3a2-8ff2-45fc-8543-7633d605d24e/
CVE: CVE-2022-0962
Published: 2022-03-14
Description: Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-79
References: https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8; https://huntr.dev/bounties/7ebe3e5f-2c86-44de-b83e-2ddb6bbda908; https://github.com/star7th/showdoc/commit/3caa32334db0c277b84e993eaca2036f5d1dbef8
CVE: CVE-2021-38971
Published: 2022-03-14
Description: IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.
CVSS Score: 4.9 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/212620; https://www.ibm.com/support/pages/node/6551076; https://exchange.xforce.ibmcloud.com/vulnerabilities/212620
CVE: CVE-2021-39051
Published: 2022-03-14
Description: IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server registration form in the portal UI to enumerate and attack services that are running on those hosts. IBM X-Force ID: 214441.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/214441; https://www.ibm.com/support/pages/node/6562479; https://exchange.xforce.ibmcloud.com/vulnerabilities/214441
CVE: CVE-2021-39055
Published: 2022-03-14
Description: IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214534.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/214534; https://www.ibm.com/support/pages/node/6562479; https://exchange.xforce.ibmcloud.com/vulnerabilities/214534
CVE: CVE-2022-22344
Published: 2022-03-14
Description: IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 220038
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/220038; https://www.ibm.com/support/pages/node/6562479; https://exchange.xforce.ibmcloud.com/vulnerabilities/220038
CVE: CVE-2022-22346
Published: 2022-03-14
Description: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 220048.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/220048; https://www.ibm.com/support/pages/node/6562855; https://exchange.xforce.ibmcloud.com/vulnerabilities/220048
CVE: CVE-2022-22348
Published: 2022-03-14
Description: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Operations Center to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Once clicked, that malicious URL could then rewrite the original page with a phishing page. IBM X-Force ID: 220139.
CVSS Score: 2.4 (LOW)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/220139; https://www.ibm.com/support/pages/node/6562855; https://exchange.xforce.ibmcloud.com/vulnerabilities/220139
CVE: CVE-2022-22353
Published: 2022-03-14
Description: IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/220480; https://www.ibm.com/support/pages/node/6563021; https://exchange.xforce.ibmcloud.com/vulnerabilities/220480
CVE: CVE-2022-22354
Published: 2022-03-14
Description: IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the Admin Console to become unresponsive. IBM X-Force ID: 220485.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/220485; https://www.ibm.com/support/pages/node/6562479; https://www.ibm.com/support/pages/node/6562989
CVE: CVE-2022-21187
Published: 2022-03-14
Description: The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url parameter is passed to the hg clone command. By injecting some hg options it was possible to get arbitrary command execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-88
References: https://github.com/vcs-python/libvcs/blob/v0.11.1/CHANGES%23libvcs-0111-2022-03-12; https://github.com/vcs-python/libvcs/pull/306; https://snyk.io/vuln/SNYK-PYTHON-LIBVCS-2421204
CVE: CVE-2022-26320
Published: 2022-03-14
Description: The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-330
References: https://fermatattack.secvuln.info; https://global.canon/en/support/security/index.html; https://web.archive.org/web/[PII_REDACTED]2721/https://safezoneswupdate.com/
CVE: CVE-2022-26351
Published: 2022-03-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-26320. Reason: This candidate is a reservation duplicate of CVE-2022-26320. Notes: All CVE users should reference CVE-2022-26320 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage