deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31364
Published: 2023-02-01
Description: Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is lower_transport_layer_on_seg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered by sending a series of segmented packets with inconsistent SegN.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://docs.google.com/document/d/1tCJg1uBYtfx4SNvewWPNXd7PB6Z__iiG/edit; https://docs.google.com/document/d/1tCJg1uBYtfx4SNvewWPNXd7PB6Z__iiG/edit
CVE: CVE-2022-3083
Published: 2023-02-01
Description: All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigation depends on the value of the session cookie. The web application could become inaccessible for the user if an attacker changes the cookie values.


CVSS Score: 3.9 (LOW)
CWE: CWE-784, CWE-565
References: https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-07; https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-07
CVE: CVE-2022-37033
Published: 2023-02-01
Description: In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private subnets. In resolving this URL, the TempFileAPI follows any 302 redirects that the remote URL returns. Because there is no re-validation of the redirect URL, the TempFileAPI can be used to return data from those local/private hosts that should not be accessible remotely.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.dotcms.com/security/SI-64; https://www.dotcms.com/security/SI-64
CVE: CVE-2022-3913
Published: 2023-02-01
Description: Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177 fail to validate the certificate of the update server when downloading updates. This failure could allow an attacker in a privileged position on the network to provide their own HTTPS endpoint, or intercept communications to the legitimate endpoint. The attacker would need some pre-existing access to at least one node on the network path between the Rapid7-controlled update server and the Nexpose/InsightVM application, and the ability to either spoof the update server's FQDN or redirect legitimate traffic to the attacker's server in order to exploit this vulnerability. Note that even in this scenario, an attacker could not normally replace an update package with a malicious package, since the update process validates a separate, code-signing certificate, distinct from the HTTPS certificate used for communication. This issue was resolved on February 1, 2023 in update 6.6.178 of Nexpose and InsightVM.





CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://docs.rapid7.com/release-notes/nexpose/20230201/; https://www.rapid7.com/blog/post/2022/12/07/cve-2022-4261-rapid7-nexpose-update-validation-issue-fixed/; https://docs.rapid7.com/release-notes/nexpose/20230201/
CVE: CVE-2022-45782
Published: 2023-02-01
Description: An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-338, CWE-338
References: https://www.dotcms.com/security/SI-66; https://www.dotcms.com/security/SI-66
CVE: CVE-2022-45783
Published: 2023-02-01
Description: An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.dotcms.com/security/SI-67; https://www.dotcms.com/security/SI-67
CVE: CVE-2022-47872
Published: 2023-02-01
Description: A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://github.com/Cedric1314/CVE-2022-47872/blob/main/README.md; https://github.com/Cedric1314/CVE-2022-47872/blob/main/README.md
CVE: CVE-2023-23750
Published: 2023-02-01
Description: An issue was discovered in Joomla! 4.0.0 through 4.2.6. A missing token check causes a CSRF vulnerability in the handling of post-installation messages.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-csrf-within-post-installation-messages.html; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-csrf-within-post-installation-messages.html
CVE: CVE-2023-23751
Published: 2023-02-01
Description: An issue was discovered in Joomla! 4.0.0 through 4.2.4. A missing ACL check allows non super-admin users to access com_actionlogs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-missing-acl-checks-for-com-actionlogs.html; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-missing-acl-checks-for-com-actionlogs.html
CVE: CVE-2022-37034
Published: 2023-02-01
Description: In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file. If done repeatedly, this will result in Tomcat request-thread exhaustion and ultimately a denial of any other requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-674, CWE-674
References: https://www.dotcms.com/security/SI-65; https://www.dotcms.com/security/SI-65
CVE: CVE-2023-0599
Published: 2023-02-01
Description: Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization.  Using this vulnerability, an authenticated attacker can execute arbitrary HTML and script code in the target browser against another Metasploit Pro user using a specially crafted request. Note that in most deployments, all Metasploit Pro users tend to enjoy privileges equivalent to local administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://docs.rapid7.com/release-notes/metasploit/20230130/; https://docs.rapid7.com/release-notes/metasploit/20230130/
CVE: CVE-2023-25012
Published: 2023-02-02
Description: The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://www.openwall.com/lists/oss-security/2023/02/02/1; http://www.openwall.com/lists/oss-security/2023/11/05/1; https://bugzilla.suse.com/show_bug.cgi?id=1207560
CVE: CVE-2023-25013
Published: 2023-02-02
Description: An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.
CVSS Score: 8.6 (HIGH)
CWE: CWE-306, CWE-306
References: https://typo3.org/help/security-advisories; https://typo3.org/security/advisory/typo3-ext-sa-2023-001; https://typo3.org/help/security-advisories
CVE: CVE-2023-25014
Published: 2023-02-02
Description: An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.
CVSS Score: 8.6 (HIGH)
CWE: CWE-306, CWE-862
References: https://typo3.org/help/security-advisories; https://typo3.org/security/advisory/typo3-ext-sa-2023-001; https://typo3.org/help/security-advisories
CVE: CVE-2023-25015
Published: 2023-02-02
Description: Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-652
References: https://github.com/ankane/clockwork_web/commit/ec2896503ee231588547c2fad4cb93a94e78f857; https://github.com/ankane/clockwork_web/compare/v0.1.1...v0.1.2; https://github.com/ankane/clockwork_web/issues/4
CVE: CVE-2022-33323
Published: 2023-02-02
Description: Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section.
CVSS Score: 7.5 (HIGH)
CWE: CWE-489
References: https://jvn.jp/vu/JVNVU94588481/index.html; https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf
CVE: CVE-2022-40268
Published: 2023-02-02
Description: Improper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B to 1.285X allows a remote unauthenticated attacker to lead legitimate users to perform unintended operations through clickjacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://jvn.jp/vu/JVNVU91222434/index.html; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-021_en.pdf; https://jvn.jp/vu/JVNVU91222434/index.html
CVE: CVE-2022-40269
Published: 2023-02-02
Description: Authentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.14.000 to 01.47.000, Mitsubishi Electric Corporation GOT2000 Series GT25 model versions 01.14.000 to 01.47.000 and Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B to 1.285X allows a remote unauthenticated attacker to disclose sensitive information from users' browsers or spoof legitimate users by abusing inappropriate HTML attributes.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://jvn.jp/vu/JVNVU91222434/index.html; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-021_en.pdf; https://jvn.jp/vu/JVNVU91222434/index.html
CVE: CVE-2022-2546
Published: 2023-02-02
Description: The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wm_export AJAX action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary html or javascript into the response that will be executed in the victims session. Note: This requires knowledge of a static secret key
CVSS Score: 4.7 (MEDIUM)
References: https://wpscan.com/vulnerability/f84920e4-a1fe-47cf-9ba5-731989c70f58; https://wpscan.com/vulnerability/f84920e4-a1fe-47cf-9ba5-731989c70f58
CVE: CVE-2023-0400
Published: 2023-02-02
Description: 
The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9 correctly detected and blocked the attempted upload of sensitive data.


CVSS Score: 5.9 (MEDIUM)
CWE: CWE-670, CWE-427
References: https://kcm.trellix.com/corporate/index?page=content&id=SB10394&locale=en_US; https://kcm.trellix.com/corporate/index?page=content&id=SB10394&locale=en_US
CVE: CVE-2023-0637
Published: 2023-02-02
Description: A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. This affects an unknown part of the file wan.asp of the component Web Management Interface. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220017 was assigned to this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://vuldb.com/?ctiid.220017; https://vuldb.com/?id.220017; https://vuldb.com/?ctiid.220017
CVE: CVE-2023-0638
Published: 2023-02-02
Description: A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-220018 is the identifier assigned to this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://vuldb.com/?ctiid.220018; https://vuldb.com/?id.220018; https://vuldb.com/?ctiid.220018
CVE: CVE-2023-0639
Published: 2023-02-02
Description: A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-220019.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.220019; https://vuldb.com/?id.220019; https://vuldb.com/?ctiid.220019
CVE: CVE-2023-0640
Published: 2023-02-02
Description: A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220020.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://vuldb.com/?ctiid.220020; https://vuldb.com/?id.220020; https://vuldb.com/?ctiid.220020
CVE: CVE-2023-0641
Published: 2023-02-02
Description: A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password requirements. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220021 was assigned to this vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-521
References: https://github.com/ctflearner/Vulnerability/blob/main/Employee%20Leaves%20Management%20System/ELMS.md; https://vuldb.com/?ctiid.220021; https://vuldb.com/?id.220021
CVE: CVE-2022-43665
Published: 2023-02-02
Description: A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-823
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1682; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1682; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1682
CVE: CVE-2020-24307
Published: 2023-02-02
Description: An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third parties were unable to reproduce any scenario in which the claimed access of BUILTIN\Users:(M) is present.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://github.com/NyaMeeEain/Infrastructure-Assessment/blob/master/Privilege%20Escalation/Common%20Windows%20Privilege%20Escalation.md; https://github.com/mRemoteNG/mRemoteNG/issues/2338; https://packetstormsecurity.com/files/170794/mRemoteNG-1.76.20-Privilege-Escalation.html
CVE: CVE-2022-46965
Published: 2023-02-02
Description: PrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89, CWE-89
References: http://prestashop.com; http://totadministrativemandate.com; https://github.com/202ecommerce/security-advisories/security/advisories/GHSA-hg7m-23j3-rf56
CVE: CVE-2023-0642
Published: 2023-02-02
Description: Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/squidex/squidex/commit/2da3c41da82eb945832f22bb70dba567ac6ce969; https://huntr.dev/bounties/3bbdafe6-e152-47bb-88a7-fd031725323d; https://github.com/squidex/squidex/commit/2da3c41da82eb945832f22bb70dba567ac6ce969
CVE: CVE-2023-0643
Published: 2023-02-02
Description: Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-167
References: https://github.com/squidex/squidex/commit/cf4efc52eab17098474d73ccff6c136fc2f737db; https://huntr.dev/bounties/ea90f8b9-d8fe-4432-9a52-4d663400c52f; https://github.com/squidex/squidex/commit/cf4efc52eab17098474d73ccff6c136fc2f737db
CVE: CVE-2022-46552
Published: 2023-02-02
Description: D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/171710/D-Link-DIR-846-Remote-Command-Execution.html; https://cwe.mitre.org/data/definitions/78.html; https://francoataffarel.medium.com/cve-2022-46552-d-link-dir-846-wireless-router-in-firmware-fw100a53dbr-retail-has-a-vulnerability-5b4ca1864c6e
CVE: CVE-2022-46604
Published: 2023-02-02
Description: An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a crafted PHP file, leading to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: http://packetstormsecurity.com/files/171720/Responsive-FileManager-9.9.5-Remote-Shell-Upload.html; https://github.com/trippo/ResponsiveFilemanager/blob/v9.9.5/filemanager/execute.php; https://github.com/trippo/ResponsiveFilemanager/blob/v9.9.6/changelog.txt
CVE: CVE-2023-0646
Published: 2023-02-02
Description: A vulnerability classified as critical was found in dst-admin 1.5.0. Affected by this vulnerability is an unknown functionality of the file /home/cavesConsole. The manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220033 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0cavesConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C; https://vuldb.com/?ctiid.220033; https://vuldb.com/?id.220033
CVE: CVE-2023-0647
Published: 2023-02-02
Description: A vulnerability, which was classified as critical, has been found in dst-admin 1.5.0. Affected by this issue is some unknown functionality of the file /home/kickPlayer. The manipulation of the argument userId leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-220034 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/Ha0Liu/cveAdd/blob/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0kickPlayer%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C/Dst-admin%201.5.0%20background%20kickPlayer%20interface%20remote%20command%20execution.md; https://vuldb.com/?ctiid.220034; https://vuldb.com/?id.220034
CVE: CVE-2023-0648
Published: 2023-02-02
Description: A vulnerability, which was classified as critical, was found in dst-admin 1.5.0. This affects an unknown part of the file /home/masterConsole. The manipulation of the argument command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-220035.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0masterConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C; https://vuldb.com/?ctiid.220035; https://vuldb.com/?id.220035
CVE: CVE-2023-0649
Published: 2023-02-02
Description: A vulnerability has been found in dst-admin 1.5.0 and classified as critical. This vulnerability affects unknown code of the file /home/sendBroadcast. The manipulation of the argument message leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220036.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0sendBroadcast%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C; https://vuldb.com/?ctiid.220036; https://vuldb.com/?id.220036
CVE: CVE-2023-0650
Published: 2023-02-02
Description: A vulnerability was found in YAFNET up to 3.1.11 and classified as problematic. This issue affects some unknown processing of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.12 is able to address this issue. The identifier of the patch is a1442a2bacc3335461b44c250e81f8d99c60735f. It is recommended to upgrade the affected component. The identifier VDB-220037 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://drive.google.com/drive/folders/1iJuhjLQy3QPIgKKgWUzEEfr_q0boaR00?usp=sharing; https://github.com/YAFNET/YAFNET/commit/a1442a2bacc3335461b44c250e81f8d99c60735f; https://github.com/YAFNET/YAFNET/releases/tag/v3.1.12
CVE: CVE-2023-23110
Published: 2023-02-02
Description: An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier.
CVSS Score: 7.4 (HIGH)
CWE: CWE-494, CWE-494
References: https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco; https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco; https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s
CVE: CVE-2023-0651
Published: 2023-02-02
Description: A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/linmoren/fastcms_bug/blob/main/password.zip; https://github.com/linmoren/fastcms_bug/blob/main/template_files_upload.md; https://vuldb.com/?ctiid.220038