deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30208
Published: 2022-07-12
Description: Windows Security Account Manager (SAM) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30208; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30208
CVE: CVE-2022-30209
Published: 2022-07-12
Description: Windows IIS Server Elevation of Privilege Vulnerability
CVSS Score: 7.4 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30209; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30209
CVE: CVE-2022-30211
Published: 2022-07-12
Description: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30211; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30211
CVE: CVE-2022-30212
Published: 2022-07-12
Description: Windows Connected Devices Platform Service Information Disclosure Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30212; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30212
CVE: CVE-2022-30213
Published: 2022-07-12
Description: Windows GDI+ Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30213; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30213
CVE: CVE-2022-30214
Published: 2022-07-12
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30214; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30214
CVE: CVE-2022-30215
Published: 2022-07-12
Description: Active Directory Federation Services Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30215; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30215
CVE: CVE-2022-30216
Published: 2022-07-12
Description: Windows Server Service Tampering Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30216; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30216
CVE: CVE-2022-30220
Published: 2022-07-12
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30220; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30220
CVE: CVE-2022-30221
Published: 2022-07-12
Description: Windows Graphics Component Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30221; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30221
CVE: CVE-2022-30222
Published: 2022-07-12
Description: Windows Shell Remote Code Execution Vulnerability
CVSS Score: 8.4 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30222; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30222
CVE: CVE-2022-30223
Published: 2022-07-12
Description: Windows Hyper-V Information Disclosure Vulnerability
CVSS Score: 5.7 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30223; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30223
CVE: CVE-2022-30224
Published: 2022-07-12
Description: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30224; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30224
CVE: CVE-2022-30225
Published: 2022-07-12
Description: Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30225; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30225
CVE: CVE-2022-30226
Published: 2022-07-12
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30226; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30226
CVE: CVE-2022-30517
Published: 2022-07-12
Description: Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/moxi624/mogu_blog_v2/issues/65; https://github.com/moxi624/mogu_blog_v2/issues/65
CVE: CVE-2022-33156
Published: 2022-07-12
Description: The matomo_integration (aka Matomo Integration) extension before 1.3.2 for TYPO3 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-011; https://typo3.org/security/advisory/typo3-ext-sa-2022-011
CVE: CVE-2022-33157
Published: 2022-07-12
Description: The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-010; https://typo3.org/security/advisory/typo3-ext-sa-2022-010
CVE: CVE-2022-33632
Published: 2022-07-12
Description: Microsoft Office Security Feature Bypass Vulnerability
CVSS Score: 4.7 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33632; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33632
CVE: CVE-2022-33633
Published: 2022-07-12
Description: Skype for Business and Lync Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33633; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33633
CVE: CVE-2022-33637
Published: 2022-07-12
Description: Microsoft Defender for Endpoint Tampering Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33637; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33637
CVE: CVE-2022-33641
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33641; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33641
CVE: CVE-2022-33642
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33642; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33642
CVE: CVE-2022-33643
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33643; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33643
CVE: CVE-2022-33644
Published: 2022-07-12
Description: Xbox Live Save Service Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33644; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33644
CVE: CVE-2022-33650
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33650; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33650
CVE: CVE-2022-33651
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33651; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33651
CVE: CVE-2022-33652
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33652; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33652
CVE: CVE-2022-33653
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33653; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33653
CVE: CVE-2022-33654
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33654; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33654
CVE: CVE-2022-33655
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33655; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33655
CVE: CVE-2022-33656
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33656; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33656
CVE: CVE-2022-33657
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33657; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33657
CVE: CVE-2022-33658
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33658; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33658
CVE: CVE-2022-33659
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33659; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33659
CVE: CVE-2022-33660
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33660; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33660
CVE: CVE-2022-33661
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33661; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33661
CVE: CVE-2022-33662
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33662; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33662
CVE: CVE-2022-33663
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33663; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33663
CVE: CVE-2022-33664
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33664; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33664
CVE: CVE-2022-33665
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33665; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33665
CVE: CVE-2022-33666
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33666; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33666
CVE: CVE-2022-33667
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33667; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33667
CVE: CVE-2022-33668
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33668; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33668
CVE: CVE-2022-33669
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33669; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33669
CVE: CVE-2022-33671
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33671; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33671
CVE: CVE-2022-33672
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33672; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33672
CVE: CVE-2022-33673
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33673; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33673
CVE: CVE-2022-33674
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 8.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33674; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33674
CVE: CVE-2022-33675
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33675; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33675
CVE: CVE-2022-33676
Published: 2022-07-12
Description: Azure Site Recovery Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33676; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33676
CVE: CVE-2022-33677
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33677; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33677
CVE: CVE-2022-33678
Published: 2022-07-12
Description: Azure Site Recovery Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33678; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33678
CVE: CVE-2022-35628
Published: 2022-07-12
Description: A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-014; https://typo3.org/security/advisory/typo3-ext-sa-2022-014
CVE: CVE-2021-46827
Published: 2022-07-13
Description: An issue was discovered in Oxygen XML WebHelp before 22.1 build[PII_REDACTED] and 23.x before 23.1 build[PII_REDACTED]. An XSS vulnerability in search terms proposals (in online documentation generated using Oxygen XML WebHelp) allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.oxygenxml.com/security/advisory/SYNC-2021-072301.html; https://www.oxygenxml.com/security/advisory/SYNC-2021-072301.html
CVE: CVE-2022-31781
Published: 2022-07-13
Description: Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles Content Types. Specially crafted Content Types may cause catastrophic backtracking, taking exponential time to complete. Specifically, this is about the regular expression used on the parameter of the org.apache.tapestry5.http.ContentType class. Apache Tapestry 5.8.2 has a fix for this vulnerability. Notice the vulnerability cannot be triggered by web requests in Tapestry code alone. It would only happen if there's some non-Tapestry codepath passing some outside input to the ContentType class constructor.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://www.openwall.com/lists/oss-security/2022/07/12/3; https://www.openwall.com/lists/oss-security/2022/07/12/3
CVE: CVE-2019-10761
Published: 2022-07-13
Description: This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code running the script allowing it to spawn a child_process and execute arbitrary code.
CVSS Score: 8.3 (HIGH)
CWE: CWE-674
References: https://github.com/patriksimek/vm2/commit/4b22d704e4794af63a5a2d633385fd20948f6f90; https://github.com/patriksimek/vm2/issues/197; https://snyk.io/vuln/SNYK-JS-VM2-473188
CVE: CVE-2019-10800
Published: 2022-07-13
Description: This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-88
References: https://github.com/codecov/codecov-python/commit/2a80aa434f74feb31242b6f213b75ce63ae97902; https://snyk.io/vuln/SNYK-PYTHON-CODECOV-552149; https://github.com/codecov/codecov-python/commit/2a80aa434f74feb31242b6f213b75ce63ae97902
CVE: CVE-2020-35257
Published: 2022-07-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-27294
Published: 2022-07-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-35259
Published: 2022-07-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-32274
Published: 2022-07-13
Description: The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://marketplace.atlassian.com/apps/37456/the-scheduler?hosting=server&tab=overview; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-040.txt; https://marketplace.atlassian.com/apps/37456/the-scheduler?hosting=server&tab=overview
CVE: CVE-2022-32065
Published: 2022-07-13
Description: An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/y_project/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6; https://gitee.com/y_project/RuoYi/issues/I57IME; https://github.com/yangzongzhuan/RuoYi/commit/d8b2a9a905fb750fa60e2400238cf4750a77c5e6
CVE: CVE-2022-32073
Published: 2022-07-13
Description: WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/wolfSSL/wolfssh/pull/360; https://github.com/wolfSSL/wolfssh/pull/360
CVE: CVE-2022-32074
Published: 2022-07-13
Description: A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a[PII_REDACTED]ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/osTicket/osTicket-plugins; https://github.com/osTicket/osTicket-plugins/commit/a7842d494889fd5533d13deb3c6a[PII_REDACTED]ae; https://owasp.org/www-community/attacks/xss/
CVE: CVE-2022-32096
Published: 2022-07-13
Description: Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted JWE token.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/babelouest/rhonabwy/; https://github.com/babelouest/rhonabwy/commit/b4c2923a1ba4fabf9b55a89244127e153a3e549b; https://github.com/babelouest/rhonabwy/
CVE: CVE-2022-34358
Published: 2022-07-13
Description: IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230516.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230516; https://www.ibm.com/support/pages/node/6603131; https://exchange.xforce.ibmcloud.com/vulnerabilities/230516
CVE: CVE-2017-20126
Published: 2022-07-13
Description: A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.96621; https://www.exploit-db.com/exploits/41166/; https://vuldb.com/?id.96621
CVE: CVE-2017-20127
Published: 2022-07-13
Description: A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.96620; https://www.exploit-db.com/exploits/41167/; https://vuldb.com/?id.96620
CVE: CVE-2017-20128
Published: 2022-07-13
Description: A vulnerability has been found in KB Messages PHP Script 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.96619; https://www.exploit-db.com/exploits/41168/; https://vuldb.com/?id.96619
CVE: CVE-2022-28888
Published: 2022-07-13
Description: Spryker Commerce OS 1.4.2 allows Remote Command Execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/167765/Spryker-Commerce-OS-Remote-Command-Execution.html; http://packetstormsecurity.com/files/172257/Spryker-Commerce-OS-1.0-SQL-Injection.html; http://seclists.org/fulldisclosure/2022/Jul/4