deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-25096
Published: 2022-02-07
Description: The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://plugins.trac.wordpress.org/changeset/2652469; https://wpscan.com/vulnerability/e6dd140e-0c9d-41dc-821e-4910a13122c1; https://plugins.trac.wordpress.org/changeset/2652469
CVE: CVE-2021-25103
Published: 2022-02-07
Description: The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the url_addon/gtranslate-email.php file before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. Note: exploitation of the issue requires knowledge of the NONCE_SALT and NONCE_KEY
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/90067336-c039-4cbe-aa9f-5eab5d1e1c3d; https://wpscan.com/vulnerability/90067336-c039-4cbe-aa9f-5eab5d1e1c3d
CVE: CVE-2021-25105
Published: 2022-02-07
Description: The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/a9ab9e84-7f5e-4e7c-8647-114d9e02e59f; https://wpscan.com/vulnerability/a9ab9e84-7f5e-4e7c-8647-114d9e02e59f
CVE: CVE-2021-25106
Published: 2022-02-07
Description: The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as subscriber, to update them. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored Cross-Site Scripting
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/47df802d-5200-484b-959c-9f569edf992e; https://wpscan.com/vulnerability/47df802d-5200-484b-959c-9f569edf992e
CVE: CVE-2021-25108
Published: 2022-02-07
Description: The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2location_country_blocker_save_rules AJAX action, allowing attackers to make a logged in admin block arbitrary country, or block all of them at once, preventing users from accessing the frontend.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2653459; https://wpscan.com/vulnerability/9d416ca3-bd02-4fcf-b3b8-f2f2280d02d2; https://plugins.trac.wordpress.org/changeset/2653459
CVE: CVE-2021-25114
Published: 2022-02-07
Description: The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/6c25a5f0-a137-4ea5-9422-8ae393d7b76b; https://www.paidmembershipspro.com/pmpro-update-2-6-7-security-release/; https://wpscan.com/vulnerability/6c25a5f0-a137-4ea5-9422-8ae393d7b76b
CVE: CVE-2022-0148
Published: 2022-02-07
Description: The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2654453/mystickyelements; https://wpscan.com/vulnerability/37665ee1-c57f-4445-9596-df4f7d72c8cd; https://plugins.trac.wordpress.org/changeset/2654453/mystickyelements
CVE: CVE-2022-0149
Published: 2022-02-07
Description: The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2654545/woocommerce-exporter; https://wpscan.com/vulnerability/e47c288a-2ea3-4926-93cc-113867cbc77c; https://plugins.trac.wordpress.org/changeset/2654545/woocommerce-exporter
CVE: CVE-2022-23261
Published: 2022-02-07
Description: Microsoft Edge (Chromium-based) Tampering Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23261; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23261
CVE: CVE-2022-23262
Published: 2022-02-07
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 6.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23262; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23262
CVE: CVE-2022-23263
Published: 2022-02-07
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23263; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23263
CVE: CVE-2021-42833
Published: 2022-02-07
Description: A Use of Hardcoded Credentials vulnerability exists in AquaView versions 1.60, 7.x, and 8.x that could allow an authenticated local attacker to manipulate users and system settings.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-798
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-350-01; https://www.xylem.com/siteassets/about-xylem/cybersecurity/advisories/xpsa-aquaview-v5.0.pdf; https://www.cisa.gov/uscert/ics/advisories/icsa-21-350-01
CVE: CVE-2022-22931
Published: 2022-02-07
Description: Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by the value of the username being used).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://lists.apache.org/thread/bp8yql4wws56jlh0vxoowj7foothsmpr; https://www.openwall.com/lists/oss-security/2022/02/07/1; https://lists.apache.org/thread/bp8yql4wws56jlh0vxoowj7foothsmpr
CVE: CVE-2022-21813
Published: 2022-02-07
Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284, CWE-755
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5312; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5312
CVE: CVE-2022-21814
Published: 2022-02-07
Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5312; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5312
CVE: CVE-2022-21815
Published: 2022-02-07
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5312; https://nvidia.custhelp.com/app/answers/detail/a_id/5312
CVE: CVE-2022-21816
Published: 2022-02-07
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284, CWE-306
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5312; https://nvidia.custhelp.com/app/answers/detail/a_id/5312
CVE: CVE-2021-3835
Published: 2022-02-07
Description: Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf
CVSS Score: 8.2 (HIGH)
CWE: CWE-122, CWE-787
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf
CVE: CVE-2021-3861
Published: 2022-02-07
Description: The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj
CVSS Score: 8.2 (HIGH)
CWE: CWE-122, CWE-787
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj
CVE: CVE-2021-45281
Published: 2022-02-07
Description: QuickBox Pro v2.4.8 contains a cross-site scripting (XSS) vulnerability at "adminuseredit.php?usertoedit=XSS", as the user supplied input for the value of this parameter is not properly sanitized.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://websec.nl/blog/61b2b37a43a1155c848f3b08/developing%20a%20remote%20code%20execution%20exploit%20for%20a%20popular%20media%20box; https://websec.nl/blog/61b2b37a43a1155c848f3b08/developing%20a%20remote%20code%20execution%20exploit%20for%20a%20popular%20media%20box
CVE: CVE-2022-21712
Published: 2022-02-07
Description: twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLikeRedirectAgent` functions. Users are advised to upgrade. There are no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-346
References: https://github.com/twisted/twisted/commit/af8fe78542a6f2bf2235ccee8158d9c88d31e8e2; https://github.com/twisted/twisted/releases/tag/twisted-22.1.0; https://github.com/twisted/twisted/security/advisories/GHSA-92x2-jw7w-xvvx
CVE: CVE-2022-23613
Published: 2022-02-07
Description: xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in version 0.9.18.1 and above. Users are advised to upgrade. There are no known workarounds.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191, CWE-191
References: https://github.com/neutrinolabs/xrdp/commit/4def30ab8ea445cdc06832a44c3ec40a506a0ffa; https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-8h98-h426-xf32; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5ONRGARKHGFU2CIEQ7E6M6VJZEM5XWW/
CVE: CVE-2022-23623
Published: 2022-02-07
Description: Frourio is a full stack framework, for TypeScript. Frourio users who uses frourio version prior to v0.26.0 and integration with class-validator through `validators/` folder are subject to a input validation vulnerability. Validators do not work properly for request bodies and queries in specific situations and some input is not validated at all. Users are advised to update frourio to v0.26.0 or later and to install `class-transformer` and `reflect-metadata`.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-20, CWE-1321
References: https://github.com/frouriojs/frourio/commit/7c19ac5363305b81b1c6b[PII_REDACTED]763d427af; https://github.com/frouriojs/frourio/security/advisories/GHSA-8xxm-h73r-ghfj; https://github.com/frouriojs/frourio/commit/7c19ac5363305b81b1c6b[PII_REDACTED]763d427af
CVE: CVE-2022-23624
Published: 2022-02-07
Description: Frourio-express is a minimal full stack framework, for TypeScript. Frourio-express users who uses frourio-express version prior to v0.26.0 and integration with class-validator through `validators/` folder are subject to a input validation vulnerability. Validators do not work properly for request bodies and queries in specific situations and some input is not validated at all. Users are advised to update frourio to v0.26.0 or later and to install `class-transformer` and `reflect-metadata`.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-20, CWE-1321
References: https://github.com/frouriojs/frourio-express/commit/73ded5c6f9f1c126c0cb2d05c0505e9e4db142d2; https://github.com/frouriojs/frourio-express/security/advisories/GHSA-mmj4-777p-fpq9; https://github.com/frouriojs/frourio-express/commit/73ded5c6f9f1c126c0cb2d05c0505e9e4db142d2
CVE: CVE-2022-24450
Published: 2022-02-08
Description: NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://advisories.nats.io/CVE/CVE-2022-24450.txt; https://github.com/nats-io/nats-server/releases/tag/v2.7.2; https://advisories.nats.io/CVE/CVE-2022-24450.txt
CVE: CVE-2022-0504
Published: 2022-02-08
Description: Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-209
References: https://github.com/microweber/microweber/commit/e607e5f745cd99d5c06a7fce16b3577fab8e1250; https://huntr.dev/bounties/285ff8a0-a273-4d62-ba01-3e4b4e18467b; https://github.com/microweber/microweber/commit/e607e5f745cd99d5c06a7fce16b3577fab8e1250
CVE: CVE-2022-0505
Published: 2022-02-08
Description: Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/microweber/microweber/commit/63447b369973724f0d352a006f25af6ff71ae292; https://huntr.dev/bounties/65b5a243-3f0c-4df3-9bab[PII_REDACTED]68; https://github.com/microweber/microweber/commit/63447b369973724f0d352a006f25af6ff71ae292
CVE: CVE-2022-0506
Published: 2022-02-08
Description: Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber/commit/05d55f2befb1b25375ca5371875ff535d6cc5f70; https://huntr.dev/bounties/0a5ec24c-343e-4cc4-b27b-2beb19a1c35f; https://github.com/microweber/microweber/commit/05d55f2befb1b25375ca5371875ff535d6cc5f70
CVE: CVE-2021-20877
Published: 2022-02-08
Description: Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers (LBP162L/LBP162, MF4890dw, MF269dw/MF265dw/MF264dw/MF262dw, MF249dw/MF245dw/MF244dw/MF242dw/MF232w, and MF229dw/MF224dw/MF222dw sold in Japan, imageCLASS MF Series (MF113W/MF212W/MF217W/MF227DW/MF229DW, MF232W/MF244DW/MF247DW/MF249DW, MF264DW/MF267DW/MF269DW/MF269DW VP, and MF4570DN/MF4570DW/MF4770N/MF4880DW/MF4890DW) and imageCLASS LBP Series (LBP113W/LBP151DW/LBP162DW ) sold in the US, and iSENSYS (LBP162DW, LBP113W, LBP151DW, MF269dw, MF267dw, MF264dw, MF113w, MF249dw, MF247dw, MF244dw, MF237w, MF232w, MF229dw, MF217w, MF212w, MF4780w, and MF4890dw) and imageRUNNER (2206IF, 2204N, and 2204F) sold in Europe) allows remote attackers to inject an arbitrary script via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cweb.canon.jp/e-support/info/211221xss.html; https://jvn.jp/en/jp/JVN64806328/index.html; https://jvn.jp/jp/JVN64806328/index.html
CVE: CVE-2022-0508
Published: 2022-02-08
Description: Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/chocobozzz/peertube/commit/f33e515991a32885622b217bf2ed1d1b0d9d6832; https://huntr.dev/bounties/c3724574-b6c9-430b-849b-40dd2b20f23c; https://github.com/chocobozzz/peertube/commit/f33e515991a32885622b217bf2ed1d1b0d9d6832
CVE: CVE-2022-21173
Published: 2022-02-08
Description: Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1.05 and earlier, WRH-300BK3-S firmware v1.05 and earlier, WRH-300DR3-S firmware v1.05 and earlier, WRH-300LB3-S firmware v1.05 and earlier, WRH-300PN3-S firmware v1.05 and earlier, WRH-300WH3-S firmware v1.05 and earlier, and WRH-300YG3-S firmware v1.05 and earlier) allows an attacker on the adjacent network to execute an arbitrary OS command via unspecified vectors.
CVSS Score: 8.8 (HIGH)
References: https://jvn.jp/en/jp/JVN17482543/index.html; https://www.elecom.co.jp/news/security/20220208-02/; https://jvn.jp/en/jp/JVN17482543/index.html
CVE: CVE-2022-21193
Published: 2022-02-08
Description: Directory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to obtain an arbitrary file on the server via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://dounokouno.com/2022/01/25/about-the-vulnerability-of-transmitmail-v2-5-0-v2-6-1/; https://jvn.jp/en/jp/JVN70100915/index.html; https://dounokouno.com/2022/01/25/about-the-vulnerability-of-transmitmail-v2-5-0-v2-6-1/
CVE: CVE-2022-21241
Published: 2022-02-08
Description: Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/plusone-masaki/csv-plus/releases/tag/v0.8.1; https://jvn.jp/en/jp/JVN67396225/index.html; https://github.com/plusone-masaki/csv-plus/releases/tag/v0.8.1
CVE: CVE-2022-21799
Published: 2022-02-08
Description: Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitrary script via unspecified vectors.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN17482543/index.html; https://www.elecom.co.jp/news/security/20220208-02/; https://jvn.jp/en/jp/JVN17482543/index.html
CVE: CVE-2022-21805
Published: 2022-02-08
Description: Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/econosys-system/php_mailform; https://jvn.jp/en/jp/JVN16690037/index.html; https://github.com/econosys-system/php_mailform
CVE: CVE-2022-22142
Published: 2022-02-08
Description: Reflected cross-site scripting vulnerability in the checkbox of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/econosys-system/php_mailform; https://jvn.jp/en/jp/JVN16690037/index.html; https://github.com/econosys-system/php_mailform
CVE: CVE-2022-22146
Published: 2022-02-08
Description: Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://dounokouno.com/2022/01/25/about-the-vulnerability-of-transmitmail-v2-5-0-v2-6-1/; https://jvn.jp/en/jp/JVN70100915/index.html; https://dounokouno.com/2022/01/25/about-the-vulnerability-of-transmitmail-v2-5-0-v2-6-1/
CVE: CVE-2022-0509
Published: 2022-02-08
Description: Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/6ccb5c12fc1be065ebce9c89c4677ee939b88597; https://huntr.dev/bounties/26cdf86c-8edc-4af6-8411-d569699ecd1b; https://github.com/pimcore/pimcore/commit/6ccb5c12fc1be065ebce9c89c4677ee939b88597
CVE: CVE-2022-23331
Published: 2022-02-08
Description: In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password.
CVSS Score: 8.8 (HIGH)
References: https://github.com/dataease/dataease/issues/1618; https://github.com/dataease/dataease/issues/1618
CVE: CVE-2022-23340
Published: 2022-02-08
Description: Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/laurent22/joplin/issues/6004; https://github.com/laurent22/joplin/issues/6004
CVE: CVE-2021-44864
Published: 2022-02-08
Description: TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated attackers can crash router httpd services via /userRpm/PingIframeRpm.htm request which contains redundant & in parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/zhlu32/cve/blob/main/tplink/wr886n/Tplink-wr886n-V3-Ping-DOS.md; https://github.com/zhlu32/cve/blob/main/tplink/wr886n/Tplink-wr886n-V3-Ping-DOS.md
CVE: CVE-2021-44956
Published: 2022-02-08
Description: Two Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23852. Issues that are in the jfif_decode function at ffjpeg/src/jfif.c (line 552) could cause a Denial of Service by using a crafted jpeg file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/rockcarry/ffjpeg/issues/43; https://github.com/rockcarry/ffjpeg/issues/43
CVE: CVE-2021-44957
Published: 2022-02-08
Description: Global buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE-2020-23705. Issue is in the jfif_encode function at ffjpeg/src/jfif.c (line 708) could cause a Denial of Service by using a crafted jpeg file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/rockcarry/ffjpeg/issues/44; https://github.com/rockcarry/ffjpeg/issues/44
CVE: CVE-2021-45325
Published: 2022-02-08
Description: Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://blog.gitea.io/2019/01/gitea-1.7.0-is-released/; https://github.com/go-gitea/gitea/pull/5705; https://blog.gitea.io/2019/01/gitea-1.7.0-is-released/
CVE: CVE-2021-45326
Published: 2022-02-08
Description: Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://blog.gitea.io/2018/10/gitea-1.5.2-is-released/; https://github.com/go-gitea/gitea/issues/4838; https://github.com/go-gitea/gitea/pull/4840
CVE: CVE-2021-45327
Published: 2022-02-08
Description: Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-436
References: https://blog.gitea.io/2020/03/gitea-1.11.2-is-released/; https://github.com/go-gitea/gitea/pull/10462; https://github.com/go-gitea/gitea/pull/10465
CVE: CVE-2022-0510
Published: 2022-02-08
Description: Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/b5a9ad65e5a4dde1916f02019f8686ad835681ce; https://huntr.dev/bounties/bb3525d5-dedc-48b8-ab04-ad4c72499abe; https://github.com/pimcore/pimcore/commit/b5a9ad65e5a4dde1916f02019f8686ad835681ce
CVE: CVE-2021-45328
Published: 2022-02-08
Description: Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://blog.gitea.io/2018/06/release-of-1.4.3/; https://github.com/go-gitea/gitea/issues/4332; https://blog.gitea.io/2018/06/release-of-1.4.3/