deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30635
Published: 2022-08-10
Description: Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-674
References: https://go.dev/cl/417064; https://go.dev/issue/53615; https://go.googlesource.com/go/+/6fa37e98ea4382bf881428ee0c150ce591500eb7
CVE: CVE-2022-31672
Published: 2022-08-10
Description: VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://www.vmware.com/security/advisories/VMSA-2022-0022.html; https://www.vmware.com/security/advisories/VMSA-2022-0022.html
CVE: CVE-2022-31673
Published: 2022-08-10
Description: VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
CVSS Score: 8.8 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2022-0022.html; https://www.vmware.com/security/advisories/VMSA-2022-0022.html
CVE: CVE-2022-31674
Published: 2022-08-10
Description: VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532, CWE-200
References: https://www.vmware.com/security/advisories/VMSA-2022-0022.html; https://www.vmware.com/security/advisories/VMSA-2022-0022.html
CVE: CVE-2022-31675
Published: 2022-08-10
Description: VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges.
CVSS Score: 7.5 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2022-0022.html; https://www.vmware.com/security/advisories/VMSA-2022-0022.html
CVE: CVE-2022-32148
Published: 2022-08-10
Description: Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For header.
CVSS Score: 6.5 (MEDIUM)
References: https://go.dev/cl/412857; https://go.dev/issue/53423; https://go.googlesource.com/go/+/b2cc0fecc2ccd80e6d5d16542cc684f97b3a9c8a
CVE: CVE-2022-32189
Published: 2022-08-10
Description: A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
CVSS Score: 7.5 (HIGH)
References: https://go.dev/cl/417774; https://go.dev/issue/53871; https://go.googlesource.com/go/+/055113ef364337607e3e72ed7d48df67fde6fc66
CVE: CVE-2022-32245
Published: 2022-08-10
Description: SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the application by an automated attack. Thus, completely compromising confidentiality but causing a limited impact on the availability of the application.
CVSS Score: 8.2 (HIGH)
CWE: CWE-319, CWE-319
References: https://launchpad.support.sap.com/#/notes/3210823; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3210823
CVE: CVE-2022-32429
Published: 2022-08-10
Description: An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/169819/MSNSwitch-Firmware-MNT.2408-Remote-Code-Execution.html; https://elifulkerson.com/CVE-2022-32429/; http://packetstormsecurity.com/files/169819/MSNSwitch-Firmware-MNT.2408-Remote-Code-Execution.html
CVE: CVE-2022-35290
Published: 2022-08-10
Description: Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/3216653; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3216653
CVE: CVE-2022-35293
Published: 2022-08-10
Description: Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/3210566; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3210566
CVE: CVE-2022-35426
Published: 2022-08-10
Description: UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/cc-225/ucms_v1.6/issues/1; https://github.com/cc-225/ucms_v1.6/issues/1
CVE: CVE-2022-35491
Published: 2022-08-10
Description: TOTOLINK A3002RU V3.0.0-B20[PII_REDACTED] has a hardcoded password for root in /etc/shadow.sample.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/[PII_REDACTED]/iot/blob/main/totolink/A3002RU.md; https://github.com/[PII_REDACTED]/iot/blob/main/totolink/A3002RU.md
CVE: CVE-2022-35509
Published: 2022-08-10
Description: An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/eyoucms/eyoucms/issues/25; https://github.com/eyoucms/eyoucms/issues/25
CVE: CVE-2022-35517
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway, ppp_username, ppp_passwd and ppp_setver, which leads to command injection in page /wizard_router_mesh.shtml.
CVSS Score: 8.8 (HIGH)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wizard_router_meshshtml-command-injection-in-admcgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wizard_router_meshshtml-command-injection-in-admcgi
CVE: CVE-2022-35518
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-nas_diskshtml-command-injection-in-nascgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-nas_diskshtml-command-injection-in-nascgi
CVE: CVE-2022-35519
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-deleting-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-deleting-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi
CVE: CVE-2022-35520
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in cgi binary. This leads to command injection in page /ledonoff.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-ledonoffshtml-hidden-parameter-ufconf-command-injection-in-apicgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-ledonoffshtml-hidden-parameter-ufconf-command-injection-in-apicgi
CVE: CVE-2022-35521
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /man_security.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-man_securityshtml-command-injection-in-firewallcgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-man_securityshtml-command-injection-in-firewallcgi
CVE: CVE-2022-35522
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rwan_ip, which leads to command injection in page /wan.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wanshtml-command-injection-in-admcgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wanshtml-command-injection-in-admcgi
CVE: CVE-2022-35523
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command injection in page /cli_black_list.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-adding-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-adding-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi
CVE: CVE-2022-35524
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wizard_repshtml-command-injection-in-admcgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wizard_repshtml-command-injection-in-admcgi
CVE: CVE-2022-35525
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledonoff.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-ledonoffshtml-command-injection-in-admcgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-ledonoffshtml-command-injection-in-admcgi
CVE: CVE-2022-35526
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-loginshtml-command-injection-in-logincgi; https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-loginshtml-command-injection-in-logincgi
CVE: CVE-2022-35533
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection in page /qos.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-qosshtml-hidden-parameters-command-injection-in-qoscgi; https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-qosshtml-hidden-parameters-command-injection-in-qoscgi
CVE: CVE-2022-35534
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command injection in page /wifi_multi_ssid.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-wifi_multi_ssidshtml-command-injection-in-wirelesscgi; https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-wifi_multi_ssidshtml-command-injection-in-wirelesscgi
CVE: CVE-2022-35535
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#command-injection-occurs-when-adding-extender-in-wavlink-router-ac1200-page-wifi_meshshtml-in-wirelesscgi; https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#command-injection-occurs-when-adding-extender-in-wavlink-router-ac1200-page-wifi_meshshtml-in-wirelesscgi
CVE: CVE-2022-35536
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injection in page /qos.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-qosshtml-command-injection-in-qoscgi; https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-qosshtml-command-injection-in-qoscgi
CVE: CVE-2022-35537
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-wifi_meshshtml-hidden-parameter-command-injection-in-wirelesscgi; https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-wifi_meshshtml-hidden-parameter-command-injection-in-wirelesscgi
CVE: CVE-2022-35538
Published: 2022-08-10
Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_delete_al_mac, which leads to command injection in page /wifi_mesh.shtml.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#command-injection-occurs-when-clicking-the-button-in-wavlink-router-ac1200-page-wifi_meshshtml-in-wirelesscgi; https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#command-injection-occurs-when-clicking-the-button-in-wavlink-router-ac1200-page-wifi_meshshtml-in-wirelesscgi
CVE: CVE-2022-35697
Published: 2022-08-10
Description: Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires a low author privilege access.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/adobe/aem-core-wcm-components/security/advisories/GHSA-qcgc-6q86-7x2p; https://github.com/adobe/aem-core-wcm-components/security/advisories/GHSA-qcgc-6q86-7x2p
CVE: CVE-2022-36270
Published: 2022-08-10
Description: Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/FF9118/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/RCE-1.md; https://github.com/FF9118/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/RCE-1.md
CVE: CVE-2022-36750
Published: 2022-08-10
Description: Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update_user.php?id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FF9118/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/SQLi-1.md; https://github.com/FF9118/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/SQLi-1.md
CVE: CVE-2022-36923
Published: 2022-08-10
Description: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-284
References: https://www.manageengine.com/itom/advisory/cve-2022-36923.html; https://www.manageengine.com/itom/advisory/cve-2022-36923.html
CVE: CVE-2022-37001
Published: 2022-08-10
Description: The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash.
CVSS Score: 7.5 (HIGH)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]
CVE: CVE-2022-37002
Published: 2022-08-10
Description: The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/8/
CVE: CVE-2022-37003
Published: 2022-08-10
Description: The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276, CWE-276
References: https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/8/
CVE: CVE-2022-37004
Published: 2022-08-10
Description: The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/8/
CVE: CVE-2022-37005
Published: 2022-08-10
Description: The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88, CWE-88
References: https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/8/
CVE: CVE-2022-37006
Published: 2022-08-10
Description: Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/8/
CVE: CVE-2022-37007
Published: 2022-08-10
Description: The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/8/
CVE: CVE-2022-37008
Published: 2022-08-10
Description: The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345, CWE-345
References: https://consumer.huawei.com/en/support/bulletin/2022/8/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/8/
CVE: CVE-2022-37024
Published: 2022-08-10
Description: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.
CVSS Score: 8.8 (HIGH)
References: https://www.manageengine.com/itom/advisory/cve-2022-37024.html; https://www.manageengine.com/itom/advisory/cve-2022-37024.html
CVE: CVE-2022-38129
Published: 2022-08-10
Description: A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-24
References: https://www.tenable.com/security/research/tra-2022-28; https://www.tenable.com/security/research/tra-2022-28
CVE: CVE-2022-38130
Published: 2022-08-10
Description: The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\<attacker-host>\sms\<attacker-db.zip>), effectively controlling the content of the database to be restored.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.tenable.com/security/research/tra-2022-28; https://www.tenable.com/security/research/tra-2022-28
CVE: CVE-2022-38150
Published: 2022-08-11
Description: In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW3X4PEKC5C736SCKE2UG3Y7JWKMD2K6/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2BUKFICLZBXESLQ3MXMIG3G52RZURFK/