deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-40099
Published: 2022-09-26
Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_expense_category.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/WYB-signal/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-3.md; https://github.com/WYB-signal/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-3.md
CVE: CVE-2022-3298
Published: 2022-09-26
Description: Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5; https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7; https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5
CVE: CVE-2022-39256
Published: 2022-09-27
Description: Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability. The authenticated user may perform the actions unknowingly by visiting a specially crafted site. This issue is patched in C1 CMS v6.13. There are no known workarounds.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-502
References: https://github.com/Orckestra/C1-CMS-Foundation/pull/814; https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.13; https://github.com/Orckestra/C1-CMS-Foundation/security/advisories/GHSA-gfhp-jgp6-838j
CVE: CVE-2022-39258
Published: 2022-09-27
Description: mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credentials or create a phishing page to steal other information. The issue has been fixed with the 2022-09 mailcow Mootember Update. As a workaround, one may delete the Swapper API Documentation from their e-mail server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200, CWE-451, CWE-601
References: https://github.com/mailcow/mailcow-dockerized/pull/4766; https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-vjgf-cp5p-wm45; https://github.com/mailcow/mailcow-dockerized/pull/4766
CVE: CVE-2021-27853
Published: 2022-09-27
Description: Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://blog.champtar.fr/VLAN0_LLC_SNAP/; https://datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/; https://kb.cert.org/vuls/id/855201
CVE: CVE-2021-27854
Published: 2022-09-27
Description: Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://blog.champtar.fr/VLAN0_LLC_SNAP/; https://datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/; https://kb.cert.org/vuls/id/855201
CVE: CVE-2021-27861
Published: 2022-09-27
Description: Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers)
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-130, CWE-290, CWE-290
References: https://blog.champtar.fr/VLAN0_LLC_SNAP/; https://datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/; https://kb.cert.org/vuls/id/855201
CVE: CVE-2021-27862
Published: 2022-09-27
Description: Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion (and optionally VLAN0 headers).
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-130, CWE-290, CWE-290
References: https://blog.champtar.fr/VLAN0_LLC_SNAP/; https://datatracker.ietf.org/doc/draft-ietf-v6ops-ra-guard/08/; https://kb.cert.org/vuls/id/855201
CVE: CVE-2021-41433
Published: 2022-09-27
Description: SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavilan Media that allows authentication bypass through login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/martinkubecka/CVE-References/blob/main/CVE-2021-41433.md; https://github.com/martinkubecka/CVE-References/blob/main/Untitled-SQLi.md; https://github.com/martinkubecka/CVE-References/blob/main/CVE-2021-41433.md
CVE: CVE-2022-23006
Published: 2022-09-27
Description: A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system locally to read information from /etc/version file. This vulnerability can only be exploited by chaining it with another issue. If an attacker is able to carry out a remote code execution attack, they can gain access to the vulnerable file, due to the presence of insecure functions in code. User interaction is required for exploitation. Exploiting the vulnerability could result in exposure of information, ability to modify files, memory access errors, or system crashes.
CVSS Score: 1.8 (LOW)
CWE: CWE-121, CWE-787
References: https://nvd.nist.gov/vuln/detail/CVE-2022-23006; https://www.westerndigital.com/support/product-security/wdc-22015-western-digital-my-cloud-home-and-sandisk-ibi-firmware-version-8-10-0-117; https://nvd.nist.gov/vuln/detail/CVE-2022-23006
CVE: CVE-2022-31367
Published: 2022-09-27
Description: Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/kos0ng/CVEs/tree/main/CVE-2022-31367; https://github.com/strapi/strapi/releases/tag/v3.6.10; https://github.com/strapi/strapi/releases/tag/v4.1.10
CVE: CVE-2022-34326
Published: 2022-09-27
Description: In ambiot amb1_sdk (aka SDK for Ameba1) before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection (with four-way handshake) failures in Soft AP mode.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.amebaiot.com/en/security_bulletin/cve-2022-34326/; https://www.realtek.com/en; https://www.amebaiot.com/en/security_bulletin/cve-2022-34326/
CVE: CVE-2022-37028
Published: 2022-09-27
Description: ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScript payload that will be executed when another user uses the application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-37028; https://excellium-services.com/cert-xlm-advisory/CVE-2022-37028; https://www.isams.com/
CVE: CVE-2022-37193
Published: 2022-09-27
Description: Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from access revocation evasion attacks once the malicious sharee obtains the access credentials.
CVSS Score: 7.4 (HIGH)
CWE: CWE-522, CWE-522
References: https://chipolo.net/en-us/products/chipolo-one-4-pack; https://github.com/zhouxinan/CCS22MaaGIoT/blob/main/ChipoloONE.md; https://chipolo.net/en-us/products/chipolo-one-4-pack
CVE: CVE-2022-37209
Published: 2022-09-27
Description: JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/AgainstTheLight/CVE-2022-37209/tree/main; https://github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql9.md; https://github.com/AgainstTheLight/CVE-2022-37209/tree/main
CVE: CVE-2022-37346
Published: 2022-09-27
Description: EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files. Exploiting this vulnerability allows a remote unauthenticated attacker to upload arbitrary files other than image files. If a user with an administrative privilege of EC-CUBE where the vulnerable plugin is installed is led to upload a specially crafted file, an arbitrary script may be executed on the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://jvn.jp/en/jp/JVN30900552/index.html; https://www.ec-cube.net/info/weakness/20220909/product_images_uploader.php; https://jvn.jp/en/jp/JVN30900552/index.html
CVE: CVE-2022-38335
Published: 2022-09-27
Description: Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the e-mail template modules.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://code.vtiger.com/vtiger/vtigercrm; https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220328-01_Vtiger_CRM_Stored_Cross-Site_Scripting; https://www.vtiger.com/
CVE: CVE-2022-38932
Published: 2022-09-27
Description: readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/klange/toaruos/issues/243; https://github.com/klange/toaruos/issues/243
CVE: CVE-2022-38975
Published: 2022-09-27
Description: DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN21213852/index.html; https://www.ec-cube.net/info/weakness/20220909/; https://jvn.jp/en/jp/JVN21213852/index.html
CVE: CVE-2022-39835
Published: 2022-09-27
Description: An issue was discovered in Gajim through 1.4.7. The vulnerability allows attackers, via crafted XML stanzas, to correct messages that were not sent by them. The attacker needs to be part of the group chat or single chat. The fixed version is 1.5.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://dev.gajim.org/gajim/gajim/-/blob/master/ChangeLog; https://dev.gajim.org/gajim/gajim/-/tags; https://dev.gajim.org/gajim/gajim/-/blob/master/ChangeLog
CVE: CVE-2022-3303
Published: 2022-09-27
Description: A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-667, CWE-362, CWE-667
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8423f0b6d513b259fdab9c9bf4aaa6188d054c2d; https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html; https://lore.kernel.org/all/CAFcO6XN7JDM4xSXGhtusQfS2mSBcx50VJKwQpCq=WeLt57aaZA%40mail.gmail.com/
CVE: CVE-2022-3323
Published: 2022-09-27
Description: An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.tenable.com/security/research/tra-2022-32; https://www.tenable.com/security/research/tra-2022-32
CVE: CVE-2022-3324
Published: 2022-09-27
Description: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/vim/vim/commit/8279af514ca7e5fd3c31cf13b0864163d1a0bfeb; https://huntr.dev/bounties/e414e55b-f332-491f-863b-c18dca97403c; https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE: CVE-2022-40199
Published: 2022-09-27
Description: Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information.
CVSS Score: 2.7 (LOW)
CWE: CWE-22, CWE-22
References: https://jvn.jp/en/jp/JVN21213852/index.html; https://www.ec-cube.net/info/weakness/20220909/; https://jvn.jp/en/jp/JVN21213852/index.html
CVE: CVE-2022-40352
Published: 2022-09-27
Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_traveller.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/songbingxue/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-1.md; https://github.com/songbingxue/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-1.md
CVE: CVE-2022-40353
Published: 2022-09-27
Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/up_booking.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/songbingxue/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-2.md; https://github.com/songbingxue/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-2.md
CVE: CVE-2022-40354
Published: 2022-09-27
Description: Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/update_booking.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/songbingxue/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-3.md; https://github.com/songbingxue/Bug_report/blob/main/vendors/mayuri_k/online-tours-travels-management-system/SQLi-3.md
CVE: CVE-2022-40816
Published: 2022-09-27
Description: Zammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that customer users are not able to see personal information of other users. This logic was not effective when used through a web socket connection, so that a logged-in attacker would be able to fetch personal data of other users by querying the Zammad API. This issue is fixed in , 5.2.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://zammad.com/de/advisories/zaa-2022-09; https://zammad.com/de/advisories/zaa-2022-09
CVE: CVE-2022-40817
Published: 2022-09-27
Description: Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents were still wrongly able to perform some operations on such tickets, like adding and removing links, tags. and related answers. This issue has been fixed in 5.2.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://zammad.com/de/advisories/zaa-2022-10; https://zammad.com/de/advisories/zaa-2022-10
CVE: CVE-2022-40877
Published: 2022-09-27
Description: Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.exploit-db.com/exploits/50725; https://www.exploit-db.com/exploits/50725
CVE: CVE-2022-40878
Published: 2022-09-27
Description: In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE).
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.exploit-db.com/exploits/50726; https://www.exploit-db.com/exploits/50726
CVE: CVE-2022-41570
Published: 2022-09-27
Description: An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/EyesOfNetworkCommunity/eonweb/issues/120; https://github.com/EyesOfNetworkCommunity/eonweb/issues/120
CVE: CVE-2022-41571
Published: 2022-09-27
Description: An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/EyesOfNetworkCommunity/eonweb/issues/120; https://github.com/EyesOfNetworkCommunity/eonweb/issues/120
CVE: CVE-2022-41604
Published: 2022-09-27
Description: Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This can be leveraged to perform an arbitrary file move as NT AUTHORITY\SYSTEM.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://github.com/Wh04m1001/ZoneAlarmEoP; https://www.infigo.hr/en/insights/39/elevation-of-privilege-in-zonealarm-extreme-security/; https://www.zonealarm.com/software/extreme-security/release-history
CVE: CVE-2022-40497
Published: 2022-09-28
Description: Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/wazuh/wazuh/pull/14801; https://github.com/wazuh/wazuh/pull/14801
CVE: CVE-2022-38699
Published: 2022-09-28
Description: Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privilege can modify the log file property to a symbolic link that points to arbitrary system file, causing the logging function to overwrite the system file and disrupt the system.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://www.twcert.org.tw/tw/cp-132-6522-4eacb-1.html; https://www.twcert.org.tw/tw/cp-132-6522-4eacb-1.html
CVE: CVE-2022-39029
Published: 2022-09-28
Description: Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://www.twcert.org.tw/tw/cp-132-6566-3805b-1.html; https://www.twcert.org.tw/tw/cp-132-6566-3805b-1.html
CVE: CVE-2022-39030
Published: 2022-09-28
Description: smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-863
References: https://www.twcert.org.tw/tw/cp-132-6567-01fa3-1.html; https://www.twcert.org.tw/tw/cp-132-6567-01fa3-1.html
CVE: CVE-2022-39031
Published: 2022-09-28
Description: Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit this vulnerability to acquire the Session IDs of other general users only.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://www.twcert.org.tw/tw/cp-132-6568-331c1-1.html; https://www.twcert.org.tw/tw/cp-132-6568-331c1-1.html
CVE: CVE-2022-39032
Published: 2022-09-28
Description: Smart eVision has an improper privilege management vulnerability. A remote attacker with general user privilege can exploit this vulnerability to escalate to administrator privilege, and then perform arbitrary system command or disrupt service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://www.twcert.org.tw/tw/cp-132-6569-9fcf4-1.html; https://www.twcert.org.tw/tw/cp-132-6569-9fcf4-1.html
CVE: CVE-2022-39033
Published: 2022-09-28
Description: Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication, access restricted paths to download and delete arbitrary system files to disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-6570-9c632-1.html; https://www.twcert.org.tw/tw/cp-132-6570-9c632-1.html
CVE: CVE-2022-39034
Published: 2022-09-28
Description: Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication, access restricted paths and download system files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-6571-fc930-1.html; https://www.twcert.org.tw/tw/cp-132-6571-fc930-1.html
CVE: CVE-2022-39035
Published: 2022-09-28
Description: Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-6572-5c2c8-1.html; https://www.twcert.org.tw/tw/cp-132-6572-5c2c8-1.html
CVE: CVE-2022-39053
Published: 2022-09-28
Description: Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-6523-d4c60-1.html; https://www.twcert.org.tw/tw/cp-132-6523-d4c60-1.html
CVE: CVE-2022-39054
Published: 2022-09-28
Description: Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-6524-74530-1.html; https://www.twcert.org.tw/tw/cp-132-6524-74530-1.html
CVE: CVE-2022-3332
Published: 2022-09-28
Description: A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-209583.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707
References: https://github.com/vuls/vuls/blob/main/Food%20Ordering%20Management%20System%20router.php%20SQL%20Injection.pdf; https://vuldb.com/?id.209583; https://github.com/vuls/vuls/blob/main/Food%20Ordering%20Management%20System%20router.php%20SQL%20Injection.pdf
CVE: CVE-2022-3333
Published: 2022-09-28
Description: A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler. The manipulation of the argument onanimationstart leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 3.2.5 is able to address this issue. It is recommended to upgrade the affected component. VDB-209370 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-707
References: https://vuldb.com/?id.209370; https://wpscan.com/vulnerability/bfd8a7aa-5977-4fe5-b2fc-12bf93caf3ed; https://vuldb.com/?id.209370