deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24689
Published: 2022-02-28
Description: The Contact Forms - Drag & Drop Contact Form Builder WordPress plugin through 1.0.5 allows high privilege users to download arbitrary files from the web server via a path traversal attack
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://wpscan.com/vulnerability/31824250-e0d4-4285-97fa-9880b363e075; https://wpscan.com/vulnerability/31824250-e0d4-4285-97fa-9880b363e075
CVE: CVE-2021-24704
Published: 2022-02-28
Description: In the Orange Form WordPress plugin through 1.0, the process_bulk_action() function in "admin/orange-form-email.php" performs an unprepared SQL query with an unsanitized parameter ($id). Only admin can access the page that invokes the function, but because of lack of CSRF protection, it is actually exploitable and could allow attackers to make a logged in admin delete arbitrary posts for example
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-352
References: https://wpscan.com/vulnerability/60843022-fe43-4608-8859-9c9109b35b42; https://wpscan.com/vulnerability/60843022-fe43-4608-8859-9c9109b35b42
CVE: CVE-2021-24730
Published: 2022-02-28
Description: The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary uploaded media.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/d5534ff9-c4af-46b7-8852-0f3dfd644855; https://wpscan.com/vulnerability/d5534ff9-c4af-46b7-8852-0f3dfd644855
CVE: CVE-2021-24803
Published: 2022-02-28
Description: The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account and takeover the website via CSRF attacks
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/97adac02-4163-48d4-ba14-0b1badfd3d42; https://wpscan.com/vulnerability/97adac02-4163-48d4-ba14-0b1badfd3d42
CVE: CVE-2021-24820
Published: 2022-02-28
Description: The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://wpscan.com/vulnerability/47652b24-a6f0-4bbc-834e-496b88523fe7; https://wpscan.com/vulnerability/47652b24-a6f0-4bbc-834e-496b88523fe7
CVE: CVE-2021-24823
Published: 2022-02-28
Description: The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php file, which could allow attackers to make logged in users do unwanted actions. For example, make an admin delete arbitrary files
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://noob3xploiter.medium.com/support-board-3-3-4-arbitrary-file-deletion-to-remote-code-execution-da4c45b45c83; https://wpscan.com/vulnerability/1bdebd9e-a7f2-4f55-b5b0-185eb619ebaf; https://noob3xploiter.medium.com/support-board-3-3-4-arbitrary-file-deletion-to-remote-code-execution-da4c45b45c83
CVE: CVE-2021-24864
Published: 2022-02-28
Description: The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2615400; https://wpscan.com/vulnerability/e3b9ee9f-602d-4e9d-810c-e1e3ba604464; https://plugins.trac.wordpress.org/changeset/2615400
CVE: CVE-2021-24898
Published: 2022-02-28
Description: The EditableTable WordPress plugin through 0.1.4 does not sanitise and escape any of the Table and Column fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/10fdc464-0ddc-4919-8f21-969fff854011; https://wpscan.com/vulnerability/10fdc464-0ddc-4919-8f21-969fff854011
CVE: CVE-2021-24901
Published: 2022-02-28
Description: The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/9c315404-b66a-448c-a3b7-367a37b53435; https://wpscan.com/vulnerability/9c315404-b66a-448c-a3b7-367a37b53435
CVE: CVE-2021-24903
Published: 2022-02-28
Description: The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ad67e45e-254a-46ce-a243-bfc86839446e; https://wpscan.com/vulnerability/ad67e45e-254a-46ce-a243-bfc86839446e
CVE: CVE-2021-24913
Published: 2022-02-28
Description: The Logo Showcase with Slick Slider WordPress plugin before 2.0.1 does not have CSRF check in the lswss_save_attachment_data AJAX action, allowing attackers to make a logged in high privilege user, change title, description, alt text, and URL of arbitrary uploaded media.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/2669404; https://wpscan.com/vulnerability/2f[PII_REDACTED]-49f0-ad6e-9192273a5c05; https://plugins.trac.wordpress.org/changeset/2669404
CVE: CVE-2021-24920
Published: 2022-02-28
Description: The StatCounter WordPress plugin before 2.0.7 does not sanitise and escape the Project ID and Secure Code settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2664933; https://wpscan.com/vulnerability/b00b5037-8ce4-4f61-b2ce-33315b39454e; https://plugins.trac.wordpress.org/changeset/2664933
CVE: CVE-2021-24933
Published: 2022-02-28
Description: The Dynamic Widgets WordPress plugin through 1.5.16 does not escape the prefix parameter before outputting it back in an attribute when using the term_tree AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/b8e6f0d3-a7d1-4ca8-aba8-0d5075167d55; https://wpscan.com/vulnerability/b8e6f0d3-a7d1-4ca8-aba8-0d5075167d55
CVE: CVE-2021-24971
Published: 2022-02-28
Description: The WP Responsive Menu WordPress plugin before 3.1.7.1 does not have capability and CSRF checks in the wpr_live_update AJAX action, as well as do not sanitise and escape some of the data submitted. As a result, any authenticated, such as subscriber could update the plugin's settings and perform Cross-Site Scripting attacks against all visitor and users on the frontend
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/661cb7e3-d7bd-4bc1-bf78-bdb4ba9610d7; https://wpscan.com/vulnerability/661cb7e3-d7bd-4bc1-bf78-bdb4ba9610d7
CVE: CVE-2021-24977
Published: 2022-02-28
Description: The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will then be processed by the frontend for all users. Due to the lack of sanitisation and escaping in the backend, it could also lead to Stored XSS issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/739831e3-cdfb-4a22-9abf-6c594d7e3d75; https://wpscan.com/vulnerability/739831e3-cdfb-4a22-9abf-6c594d7e3d75
CVE: CVE-2021-24994
Published: 2022-02-28
Description: The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ea74257a-f6b0-49e9-a81f-53c0eb81b1da; https://wpscan.com/vulnerability/ea74257a-f6b0-49e9-a81f-53c0eb81b1da
CVE: CVE-2021-25010
Published: 2022-02-28
Description: The Post Snippets WordPress plugin before 3.1.4 does not have CSRF check when importing files, allowing attacker to make a logged In admin import arbitrary snippets. Furthermore, imported snippers are not sanitised and escaped, which could lead to Stored Cross-Site Scripting issues
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: https://wpscan.com/vulnerability/d1ebd15a-72ab-4ba2-a212-7e2eea0b0fb0; https://wpscan.com/vulnerability/d1ebd15a-72ab-4ba2-a212-7e2eea0b0fb0
CVE: CVE-2021-25011
Published: 2022-02-28
Description: The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-862, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2641450; https://wpscan.com/vulnerability/6639da0d-6d29-46c1-a3cc-5e[PII_REDACTED]; https://plugins.trac.wordpress.org/changeset/2641450
CVE: CVE-2021-25034
Published: 2022-02-28
Description: The WP User WordPress plugin before 7.0 does not sanitise and escape some parameters in pages where the [wp_user] shortcode is used, leading to Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c4e50dd2-450f-413d-b15f-ece413e42157; https://wpscan.com/vulnerability/c4e50dd2-450f-413d-b15f-ece413e42157
CVE: CVE-2021-25042
Published: 2022-02-28
Description: The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.5 does not have authorisation and CSRF checks in the updateIpAddress AJAX action, allowing any authenticated user to call it, or make a logged in user do it via a CSRF attack and add an arbitrary IP address to exclude. Furthermore, due to the lack of validation, sanitisation and escaping, users could set a malicious value and perform Cross-Site Scripting attacks against logged in admin
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/05b9e478-2d3b-4460-88c1-7f81d3a68ac4; https://wpscan.com/vulnerability/05b9e478-2d3b-4460-88c1-7f81d3a68ac4
CVE: CVE-2021-25081
Published: 2022-02-28
Description: The Maps Plugin using Google Maps for WordPress plugin before 1.8.4 does not have CSRF checks in most of its AJAX actions, which could allow attackers to make logged in admins delete arbitrary posts and update the plugin's settings via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/2667376; https://wpscan.com/vulnerability/f85cf258-1c2f-444e-91e5-b1fc55880f0e; https://plugins.trac.wordpress.org/changeset/2667376
CVE: CVE-2021-25112
Published: 2022-02-28
Description: The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2659751; https://wpscan.com/vulnerability/4aae2dd9-8d51-4633-91bc-ddb53ca3471c; https://plugins.trac.wordpress.org/changeset/2659751
CVE: CVE-2021-25118
Published: 2022-02-28
Description: The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset/2608691; https://wpscan.com/vulnerability/2c3f9038-632d-40ef-a099-6ea202efb550; https://plugins.trac.wordpress.org/changeset/2608691
CVE: CVE-2021-4222
Published: 2022-02-28
Description: The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/160800/; https://wpscan.com/vulnerability/6df5f5b1-f10b-488e-80b3-2c024bbb8c78; https://packetstormsecurity.com/files/160800/
CVE: CVE-2022-0150
Published: 2022-02-28
Description: The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2661008; https://wpscan.com/vulnerability/7142a538-7c3d-4dd0-bd2c-cbd2efaf53c5; https://plugins.trac.wordpress.org/changeset/2661008
CVE: CVE-2022-0189
Published: 2022-02-28
Description: The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape the id parameter in the wprss_fetch_items_row_action AJAX action before outputting it back in the response, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2659298; https://wpscan.com/vulnerability/52a71bf1-b8bc-479e-b741-eb8fb9685014; https://plugins.trac.wordpress.org/changeset/2659298
CVE: CVE-2022-0328
Published: 2022-02-28
Description: The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/2662855; https://wpscan.com/vulnerability/44532b7c-4d0d-4959-ada4-733f377d6ec9; https://plugins.trac.wordpress.org/changeset/2662855
CVE: CVE-2022-0345
Published: 2022-02-28
Description: The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfw_search_users AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes (finding the first letter, then the second one, then the third one etc.).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/b3b523b9-6c92-4091-837a-d34e3174eb19; https://wpscan.com/vulnerability/b3b523b9-6c92-4091-837a-d34e3174eb19
CVE: CVE-2022-0360
Published: 2022-02-28
Description: The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2662897; https://wpscan.com/vulnerability/d718b993-4de5-499c-84c9-69801396f51f; https://plugins.trac.wordpress.org/changeset/2662897
CVE: CVE-2022-0377
Published: 2022-02-28
Description: Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration.  After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the image. As a result of this request, the name of the user-supplied image is changed with a MD5 value. This process can be conducted only when type of the image is JPG or PNG. An attacker can use this vulnerability in order to rename an arbitrary image file. By doing this, they could destroy the design of the web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-327
References: https://bozogullarindan.com/en/2022/01/wordpress-learnpress-plugin-4.1.4.1-arbitrary-image-renaming/; https://github.com/LearnPress/learnpress/commit/d1dc4af7ef2950f1000abc21bd9520fb3eb98faf; https://wpscan.com/vulnerability/0d95ada6-53e3-4a80-a395-eacd7b090f26
CVE: CVE-2022-0383
Published: 2022-02-28
Description: The WP Review Slider WordPress plugin before 11.0 does not sanitise and escape the pid parameter when copying a Twitter source, which could allow a high privilege users to perform SQL Injections attacks
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2666513; https://wpscan.com/vulnerability/e0402753-3a80-455b-9fab-a7d2a7687193; https://plugins.trac.wordpress.org/changeset/2666513
CVE: CVE-2022-0385
Published: 2022-02-28
Description: The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard, leading to an unauthenticated Stored Cross-Site scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/60067b8b-9fa5-40d1-817a[PII_REDACTED]91; https://wpscan.com/vulnerability/60067b8b-9fa5-40d1-817a[PII_REDACTED]91
CVE: CVE-2022-0411
Published: 2022-02-28
Description: The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a SQL statement via a REST route of the plugin (accessible to any authenticated user), leading to a SQL injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2669226/asgaros-forum; https://wpscan.com/vulnerability/35272197-c973-48ad-8405-538bfbafa172; https://plugins.trac.wordpress.org/changeset/2669226/asgaros-forum
CVE: CVE-2022-0412
Published: 2022-02-28
Description: The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint, allowing unauthenticated attackers to perform SQL injection attacks
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2668899; https://wpscan.com/vulnerability/e984ba11-abeb-4ed4-9dad-0bfd539a9682; https://plugins.trac.wordpress.org/changeset/2668899
CVE: CVE-2022-23911
Published: 2022-02-28
Description: The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before using it in a SQL statement when retrieving a testimonial to edit, leading to a SQL Injection
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2664185; https://wpscan.com/vulnerability/77fd6749-4fb2-48fa-a191-437b442f28e9; https://plugins.trac.wordpress.org/changeset/2664185
CVE: CVE-2022-23912
Published: 2022-02-28
Description: The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not sanitise and escape the id parameter before outputting it back in an attribute, leading to a Reflected cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2664185; https://wpscan.com/vulnerability/09512431-aa33-4514-8b20-1963c5d89f33; https://plugins.trac.wordpress.org/changeset/2664185
CVE: CVE-2022-23987
Published: 2022-02-28
Description: The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape their Form Name, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1697351b-c201-4e85-891e-94fdccbdfb55; https://wpscan.com/vulnerability/1697351b-c201-4e85-891e-94fdccbdfb55
CVE: CVE-2022-23988
Published: 2022-02-28
Description: The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/9d5738f9-9a2e-4878-8a03-745894420bf6; https://wpscan.com/vulnerability/9d5738f9-9a2e-4878-8a03-745894420bf6
CVE: CVE-2022-0768
Published: 2022-02-28
Description: Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/rudloff/alltube/commit/148a171b240e7ceb076b9e198bef412de14ac55d; https://huntr.dev/bounties/9b14cc46-ec08-4940-83cc-9f986b2a5903; https://github.com/rudloff/alltube/commit/148a171b240e7ceb076b9e198bef412de14ac55d
CVE: CVE-2022-24571
Published: 2022-02-28
Description: Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nsparker1337/OpenSource/blob/main/exploit_sql; https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24571; https://www.nu11secur1ty.com/2022/03/cve-2022-24571.html
CVE: CVE-2022-24572
Published: 2022-02-28
Description: Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nsparker1337/OpenSource/blob/main/exploit_xss; https://github.com/nsparker1337/OpenSource/blob/main/exploit_xss
CVE: CVE-2022-24685
Published: 2022-02-28
Description: HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://discuss.hashicorp.com; https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/; https://discuss.hashicorp.com/t/hcsec-2022-03-nomad-malformed-job-parsing-results-in-excessive-cpu-usage/35561
CVE: CVE-2021-43086
Published: 2022-02-28
Description: ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffer-overflow occurred in function encode_ise() in function compress_symbolic_block_for_partition_2planes() in "/Source/astcenc_compress_symbolic.cpp".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/ARM-software/astc-encoder/issues/296.; https://github.com/ARM-software/astc-encoder/issues/296.
CVE: CVE-2021-44334
Published: 2022-02-28
Description: David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_jpg_convert_YCbCr_to_RGB() in "/ok_jpg.c:513" .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/brackeen/ok-file-formats/issues/12; https://github.com/brackeen/ok-file-formats/issues/12
CVE: CVE-2022-25642
Published: 2022-02-28
Description: Obyte (formerly Byteball) Wallet before 3.4.1 allows XSS. A crafted chat message can lead to remote code execution.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/byteball/obyte-gui-wallet/releases/tag/v3.4.1; https://obyte.org/faq; https://vuln.ryotak.me/advisories/64
CVE: CVE-2021-44339
Published: 2022-02-28
Description: David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_png_transform_scanline() in "/ok_png.c:712".
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/brackeen/ok-file-formats/issues/15; https://github.com/brackeen/ok-file-formats/issues/15