deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-39364
Published: 2022-10-27
Description: Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server prior to versions 22.2.10.5, 23.0.9, and 24.0.5 an attacker reading `nextcloud.log` may gain knowledge of credentials to connect to a SharePoint service. Nextcloud Server versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server versions 22.2.10.5, 23.0.9, and 24.0.5 contain a patch for this issue. As a workaround, set `zend.exception_ignore_args = On` as an option in `php.ini`.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qpf5-jj85-36h5; https://github.com/nextcloud/server/pull/33689; https://github.com/nextcloud/sharepoint/issues/141
CVE: CVE-2022-39365
Published: 2022-10-27
Description: Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in `Pimcore/Mail` & `ClassDefinition\Layout\Text` is vulnerable to server-side template injection, which could lead to remote code execution. Version 10.5.9 contains a patch for this issue. As a workaround, one may apply the patch manually.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/pimcore/pimcore/commit/43aa34e018f5cd447bceb864358285ba92f68372; https://github.com/pimcore/pimcore/pull/13347; https://github.com/pimcore/pimcore/pull/13347.patch
CVE: CVE-2022-3095
Published: 2022-10-27
Description: The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '\' characters in URIs, which can lead to auth bypass in webapps interpreting URIs. We recommend updating Dart or Flutter to mitigate the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/dart-lang/sdk/blob/master/CHANGELOG.md#2182---2022-09-28; https://github.com/dart-lang/sdk/blob/master/CHANGELOG.md#2182---2022-09-28
CVE: CVE-2022-24669
Published: 2022-10-27
Description: It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://backstage.forgerock.com/downloads/browse/am/featured; https://backstage.forgerock.com/knowledge/kb/article/a90639318; https://backstage.forgerock.com/downloads/browse/am/featured
CVE: CVE-2022-24670
Published: 2022-10-27
Description: An attacker can use the unrestricted LDAP queries to determine configuration entries
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: https://backstage.forgerock.com/downloads/browse/am/featured; https://backstage.forgerock.com/knowledge/kb/article/a90639318; https://backstage.forgerock.com/downloads/browse/am/featured
CVE: CVE-2022-3725
Published: 2022-10-27
Description: Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3725.json; https://gitlab.com/wireshark/wireshark/-/issues/18378; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OIEIFFZ27YKCTK5C2VT4OEQSHPQDBNSF/
CVE: CVE-2022-40183
Published: 2022-10-27
Description: An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html; https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html
CVE: CVE-2022-40184
Published: 2022-10-27
Description: Incomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET multi 4000 allows an attacker with administrative credentials to store JavaScript code which will be executed for all administrators accessing the same configuration option.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html; https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html
CVE: CVE-2022-41996
Published: 2022-10-27
Description: Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada premium theme versions <= 7.8.1 on WordPress leading to arbitrary plugin installation/activation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/avada/wordpress-avada-premium-theme-7-8-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://theme-fusion.com/documentation-assets/avada/changelog.txt; https://themeforest.net/item/avada-responsive-multipurpose-theme/2833226
CVE: CVE-2022-31898
Published: 2022-10-27
Description: gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vulnerabilities via the ping_addr and trace_addr function parameters.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://boschko.ca/glinet-router; https://boschko.ca/glinet-router
CVE: CVE-2022-40874
Published: 2022-10-27
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow vulnerability in the GetParentControlInfo function, which can cause a denial of service attack through a carefully constructed http request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cnblogs.com/L0g4n-blog/p/16695155.html; https://www.cnblogs.com/L0g4n-blog/p/16695155.html
CVE: CVE-2022-40875
Published: 2022-10-27
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow in the function GetParentControlInfo.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cnblogs.com/L0g4n-blog/p/16695155.html; https://www.cnblogs.com/L0g4n-blog/p/16695155.html
CVE: CVE-2022-42054
Published: 2022-10-27
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Company Name and Description text fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://boschko.ca/glinet-router; https://boschko.ca/glinet-router
CVE: CVE-2022-42055
Published: 2022-10-27
Description: Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://boschko.ca/glinet-router; https://boschko.ca/glinet-router
CVE: CVE-2022-43364
Published: 2022-10-27
Description: An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to arbitrarily change the admin password.
CVSS Score: 7.5 (HIGH)
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/5_reset_the_password.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/5_reset_the_password.md
CVE: CVE-2022-43365
Published: 2022-10-27
Description: IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/1_bof.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/1_bof.md
CVE: CVE-2022-43366
Published: 2022-10-27
Description: IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, ate, telnet, version, setDebugCfg, and boot interfaces.
CVSS Score: 7.5 (HIGH)
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/4_information_disclosure.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/4_information_disclosure.md
CVE: CVE-2022-43367
Published: 2022-10-27
Description: IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/2_cmdi.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/ip-com/2_cmdi.md
CVE: CVE-2022-32407
Published: 2022-10-27
Description: Softr v2.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via the First Name parameter under the Create A New Account module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://riteshgohil-25.medium.com/softr-version-2-0-33463a6bf766; https://studio.softr.io/auth/signup; https://riteshgohil-25.medium.com/softr-version-2-0-33463a6bf766
CVE: CVE-2022-0072
Published: 2022-10-27
Description: Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/src/main/httpserver.cpp#L2060-L2061; https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/src/main/httpserver.cpp#L2060-L2061; https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/src/main/httpserver.cpp#L2060-L2061
CVE: CVE-2022-0073
Published: 2022-10-27
Description: Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0  versions before 1.7.16.1.

CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/dist/admin/html.open/lib/CValidation.php#L565; https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/dist/admin/html.open/lib/CValidation.php#L565; https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/dist/admin/html.open/lib/CValidation.php#L565
CVE: CVE-2022-0074
Published: 2022-10-27
Description: Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.

CVSS Score: 8.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://github.com/litespeedtech/ols-dockerfiles/blob/master/template/Dockerfile#L29; https://github.com/litespeedtech/ols-dockerfiles/blob/master/template/Dockerfile#L29
CVE: CVE-2022-39976
Published: 2022-10-27
Description: School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /modules/announcement/index.php?view=edit&id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/z1pwn/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-1.md; https://github.com/z1pwn/bug_report/blob/main/vendors/janobe/school-activity-updates-sms-notification/SQLi-1.md
CVE: CVE-2022-39977
Published: 2022-10-27
Description: Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/z1pwn/bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/RCE-2.md; https://github.com/z1pwn/bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/RCE-2.md
CVE: CVE-2022-39978
Published: 2022-10-27
Description: Online Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the Product List module. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/z1pwn/bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/RCE-1.md; https://github.com/z1pwn/bug_report/blob/main/vendors/oretnom23/online-pet-shop-we-app/RCE-1.md
CVE: CVE-2022-43340
Published: 2022-10-27
Description: A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and grant Administrator rights to regular users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://dzzoffice.com; https://github.com/zyx0814/dzzoffice; https://github.com/zyx0814/dzzoffice/issues/223
CVE: CVE-2022-3385
Published: 2022-10-27
Description: 
Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stack buffer and enable remote code execution.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01
CVE: CVE-2022-3386
Published: 2022-10-27
Description: 
Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer and enable remote code execution. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01
CVE: CVE-2022-3387
Published: 2022-10-27
Description: 
Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could remotely exploit vulnerable PHP code to delete .PDF files.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-291-01
CVE: CVE-2022-40876
Published: 2022-10-27
Description: In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://www.cnblogs.com/L0g4n-blog/p/16695155.html; https://www.cnblogs.com/L0g4n-blog/p/16704071.html; https://www.cnblogs.com/L0g4n-blog/p/16695155.html
CVE: CVE-2022-40965
Published: 2022-10-27
Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-40967
Published: 2022-10-27
Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-41133
Published: 2022-10-27
Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-41555
Published: 2022-10-27
Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutLineMessageSetting API.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-41627
Published: 2022-10-27
Description: 
The physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal electrocardiogram (EKG) has no encryption for its data-over-sound protocols. Exploiting this vulnerability could allow an attacker to read patient EKG results or create a denial-of-service condition by emitting sounds at similar frequencies as the device, disrupting the smartphone microphone’s ability to accurately read the data. To carry out this attack, the attacker must be close (less than 5 feet) to pick up and emit sound waves.


CVSS Score: 4.8 (MEDIUM)
CWE: CWE-311, CWE-319
References: https://www.cisa.gov/uscert/ics/advisories/icsma-22-298-01; https://www.cisa.gov/uscert/ics/advisories/icsma-22-298-01
CVE: CVE-2022-41651
Published: 2022-10-27
Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the SetPF API.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-41701
Published: 2022-10-27
Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-41702
Published: 2022-10-27
Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-41773
Published: 2022-10-27
Description: The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-3378
Published: 2022-10-27
Description: 
Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory write.


CVSS Score: 7.8 (HIGH)
CWE: CWE-824, CWE-824
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03
CVE: CVE-2022-3379
Published: 2022-10-27
Description: 
Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.


CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03
CVE: CVE-2021-36206
Published: 2022-10-28
Description: All versions of CEVAS prior to 1.01.46 do not sufficiently validate user-controllable input and could allow a user to bypass authentication and retrieve data with specially crafted SQL queries.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-05; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-05
CVE: CVE-2021-38395
Published: 2022-10-28
Description: Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74, CWE-74
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04; https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf; https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
CVE: CVE-2021-38397
Published: 2022-10-28
Description: Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04; https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf; https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
CVE: CVE-2021-38399
Published: 2022-10-28
Description: Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04; https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf; https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04
CVE: CVE-2022-31678
Published: 2022-10-28
Description: VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://www.vmware.com/security/advisories/VMSA-2022-0027.html; https://www.vmware.com/security/advisories/VMSA-2022-0027.html
CVE: CVE-2022-33859
Published: 2022-10-28
Description: A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary files using the file upload feature. 

This vulnerability is present in versions 4.x, 5.x, 6.x & 7.0 to 7.5. A new version (v7.6) containing the remediation has been made available by Eaton and a mitigation has been provided for the affected versions that are currently supported. 

Customers are advised to update the software to the latest version (v7.6).

Foreseer EPMS versions 4.x, 5.x, 6.x are no longer supported by Eaton. Please refer to the  End-of-Support notification https://www.eaton.com/in/en-us/catalog/services/foreseer/foreseer-legacy.html .
CVSS Score: 8.1 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.eaton.com/us/en-us/company/news-insights/cybersecurity/security-notifications.html; https://www.eaton.com/us/en-us/company/news-insights/cybersecurity/security-notifications.html