deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-25020
Published: 2022-03-01
Description: A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://pluxml.com; https://github.com/MoritzHuppert/CVE-2022-25020/blob/main/CVE-2022-25020.pdf; https://www.cvedetails.com/cve/CVE-2021-38602/
CVE: CVE-2022-25022
Published: 2022-03-01
Description: A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://danpros.com; http://htmly.com; https://github.com/MoritzHuppert/CVE-2022-25022/blob/main/CVE-2022-25022.pdf
CVE: CVE-2021-43619
Published: 2022-03-01
Description: Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psa_fwu_write caller from SPE or NSPE can overwrite stack memory locations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://developer.arm.com/support/arm-security-updates; https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/; https://tf-m-user-guide.trustedfirmware.org/docs/security/security_advisories/fwu_write_vulnerability.html
CVE: CVE-2021-35036
Published: 2022-03-01
Description: A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-information-vulnerability; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-information-vulnerability
CVE: CVE-2021-4039
Published: 2022-03-01
Description: A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/166752/Zyxel-NWA-1100-NH-Command-Injection.html; https://www.zyxel.com/support/OS-command-injection-vulnerability-of-NWA1100-NH-access-point.shtml; http://packetstormsecurity.com/files/166752/Zyxel-NWA-1100-NH-Command-Injection.html
CVE: CVE-2022-0776
Published: 2022-03-01
Description: Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/hakimel/reveal.js/commit/32cdd3b1872ba8e2267c9e87ae216cb55f40f4d2; https://huntr.dev/bounties/be2b7ee4-f487-42e1-874a-6bcc410e4001; https://github.com/hakimel/reveal.js/commit/32cdd3b1872ba8e2267c9e87ae216cb55f40f4d2
CVE: CVE-2022-0777
Published: 2022-03-01
Description: Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640, CWE-640
References: https://github.com/microweber/microweber/commit/a3944cf9d1d8c41a48297ddc98302934e2511b0f; https://huntr.dev/bounties/b36be8cd-544f-42bd-990d-aa1a46df44d7; https://github.com/microweber/microweber/commit/a3944cf9d1d8c41a48297ddc98302934e2511b0f
CVE: CVE-2021-44747
Published: 2022-03-01
Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.
CVSS Score: 4.6 (MEDIUM)
References: https://www.f-secure.com/en/business/support-and-downloads/security-advisories; https://www.f-secure.com/en/business/support-and-downloads/security-advisories
CVE: CVE-2022-23377
Published: 2022-03-01
Description: Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://www.exploit-db.com/exploits/50665; https://www.exploit-db.com/exploits/50665
CVE: CVE-2022-23380
Published: 2022-03-01
Description: There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/taogogo/taocms/issues/16; https://github.com/taogogo/taocms/issues/16
CVE: CVE-2021-44238
Published: 2022-03-01
Description: AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/loadream/AyaCMS/issues/2; https://github.com/loadream/AyaCMS/issues/2
CVE: CVE-2021-46387
Published: 2022-03-01
Description: ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard hijacking and session hijacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/166189/Zyxel-ZyWALL-2-Plus-Cross-Site-Scripting.html; https://drive.google.com/drive/folders/1_XfWBLqxT2Mqt7uB663Sjlc62pE8-rcN?usp=sharing; https://www.zyxel.com/uk/en/products_services/zywall_2_plus.shtml
CVE: CVE-2020-4925
Published: 2022-03-01
Description: A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599.
CVSS Score: 5.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191599; https://www.ibm.com/support/pages/node/6560094; https://exchange.xforce.ibmcloud.com/vulnerabilities/191599
CVE: CVE-2021-38955
Published: 2022-03-01
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. IBM X-Force ID: 211825.
CVSS Score: 4.4 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/211825; https://www.ibm.com/support/pages/node/6560236; https://exchange.xforce.ibmcloud.com/vulnerabilities/211825
CVE: CVE-2021-38986
Published: 2022-03-01
Description: IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-613
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/212942; https://www.ibm.com/support/pages/node/6560032; https://exchange.xforce.ibmcloud.com/vulnerabilities/212942
CVE: CVE-2022-22321
Published: 2022-03-01
Description: IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID: 218368.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/218368; https://www.ibm.com/support/pages/node/6560042; https://exchange.xforce.ibmcloud.com/vulnerabilities/218368
CVE: CVE-2022-23387
Published: 2022-03-01
Description: An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/taogogo/taocms/issues; https://github.com/taogogo/taocms/issues/23; https://github.com/taogogo/taocms/issues
CVE: CVE-2021-36166
Published: 2022-03-01
Description: An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of the observation of certain system's properties.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://fortiguard.com/psirt/FG-IR-21-028; https://fortiguard.com/psirt/FG-IR-21-028
CVE: CVE-2021-36171
Published: 2022-03-01
Description: The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame.
CVSS Score: 8.1 (HIGH)
CWE: CWE-338
References: https://fortiguard.com/psirt/FG-IR-21-099; https://fortiguard.com/psirt/FG-IR-21-099
CVE: CVE-2020-15936
Published: 2022-03-01
Description: A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.13 and below allows attacker to disclose sensitive information via SNI Client Hello TLS packets.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: https://fortiguard.com/advisory/FG-IR-20-091; https://fortiguard.com/advisory/FG-IR-20-091
CVE: CVE-2021-32586
Published: 2022-03-01
Description: An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20
References: https://fortiguard.com/psirt/FG-IR-21-008; https://fortiguard.com/psirt/FG-IR-21-008
CVE: CVE-2021-41193
Published: 2022-03-01
Description: wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are currently no known workarounds.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://github.com/wireapp/wire-avs/commit/40d373ede795443ae6f2f756e9fb1f4f4ae90bbe; https://github.com/wireapp/wire-avs/security/advisories/GHSA-2j6v-xpf3-xvrv; https://github.com/wireapp/wire-avs/commit/40d373ede795443ae6f2f756e9fb1f4f4ae90bbe
CVE: CVE-2021-43075
Published: 2022-03-01
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the alarm dashboard and controller config handlers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-128; https://fortiguard.com/advisory/FG-IR-21-128
CVE: CVE-2021-43077
Published: 2022-03-01
Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the AP monitor handlers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://fortiguard.com/advisory/FG-IR-21-189; https://fortiguard.com/advisory/FG-IR-21-189
CVE: CVE-2022-22300
Published: 2022-03-01
Description: A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through 6.0.11, FortiAnalyzer version 6.2.0 through 6.2.9, FortiAnalyzer version 6.4.0 through 6.4.7, FortiAnalyzer version 7.0.0 through 7 .0.2, FortiManager version 5.6.0 through 5.6.11, FortiManager version 6.0.0 through 6.0.11, FortiManager version 6.2.0 through 6.2.9, FortiManager version 6.4.0 through 6.4.7, FortiManager version 7.0.0 through 7.0.2 allows attacker to bypass the device policy and force the password-change action for its user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-755
References: https://fortiguard.com/psirt/FG-IR-21-255; https://fortiguard.com/psirt/FG-IR-21-255
CVE: CVE-2022-24717
Published: 2022-03-01
Description: ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross site scripting (XSS) issue can occur when providing untrusted input to the `redirect.link` property as an argument to the `build(MessagePageOptions)` function. While there is no known workaround at this time, there is a patch in version 0.1.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Finastra/ssr-pages/commit/98abc59e28fec48246be0d59ac144675d6361073; https://github.com/Finastra/ssr-pages/pull/2; https://github.com/Finastra/ssr-pages/pull/2/commits/133606ffaec2edd9918d9fba5771ed21da7876a5
CVE: CVE-2022-24718
Published: 2022-03-01
Description: ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.4, a path traversal issue can occur when providing untrusted input to the `svg` property as an argument to the `build(MessagePageOptions)` function. While there is no known workaround at this time, there is a patch in version 0.1.4.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://github.com/Finastra/ssr-pages/pull/1; https://github.com/Finastra/ssr-pages/pull/1/commits/c3e4c563384ae3ba3892f37dd[PII_REDACTED]0780; https://github.com/Finastra/ssr-pages/security/advisories/GHSA-w6cx-qg2q-rvq8
CVE: CVE-2022-24719
Published: 2022-03-01
Description: Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `followRedirects` or `followRedirectsWith` with any of the redirection strategies built into fluture-node 4.0.0 or 4.0.1, paired with a request that includes confidential headers such as Authorization or Cookie, exposes you to a vulnerability where, if the destination server were to redirect the request to a server on a third-party domain, or the same domain over unencrypted HTTP, the headers would be included in the follow-up request and be exposed to the third party, or potential http traffic sniffing. The redirection strategies made available in version 4.0.2 automatically redact confidential headers when a redirect is followed across to another origin. A workaround has been identified by using a custom redirection strategy via the `followRedirectsWith` function. The custom strategy can be based on the new strategies available in fluture-node@4.0.2.
CVSS Score: 2.6 (LOW)
CWE: CWE-359, CWE-212
References: https://github.com/fluture-js/fluture-node/commit/0c99bc511533d48be17dc6bfe641f7d0aeb34d77; https://github.com/fluture-js/fluture-node/commit/125e4474f910c1507f8ec[PII_REDACTED]fbc0f55c4; https://github.com/fluture-js/fluture-node/security/advisories/GHSA-32x6-qvw6-mxj4
CVE: CVE-2021-41282
Published: 2022-03-01
Description: diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection mechanisms against command injection (i.e., the usage of the escapeshellarg function for the arguments) are used, it is still possible to inject sed-specific code and write an arbitrary file in an arbitrary location.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://packetstormsecurity.com/files/166208/pfSense-2.5.2-Shell-Upload.html; https://docs.netgate.com/pfsense/en/latest/releases/22-01_2-6-0.html; https://www.shielder.it/advisories/
CVE: CVE-2021-41652
Published: 2022-03-01
Description: Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://deathflash1411.github.io/blog/dumping-batflat-cms-database; https://github.com/sruupl/batflat/issues/113; https://deathflash1411.github.io/blog/dumping-batflat-cms-database
CVE: CVE-2022-24251
Published: 2022-03-01
Description: Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://extensis.com; http://portfolio.com; https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/
CVE: CVE-2022-24252
Published: 2022-03-01
Description: An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://extensis.com; http://portfolio.com; https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/
CVE: CVE-2022-24253
Published: 2022-03-01
Description: Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://extensis.com; http://portfolio.com; https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/
CVE: CVE-2022-24254
Published: 2022-03-01
Description: An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://extensis.com; http://portfolio.com; https://snyk.io/research/zip-slip-vulnerability
CVE: CVE-2022-24255
Published: 2022-03-01
Description: Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://extensis.com; http://portfolio.com; https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/
CVE: CVE-2022-24720
Published: 2022-03-01
Description: image_processing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the `#apply` method from image_processing to apply a series of operations that are coming from unsanitized user input allows the attacker to execute shell commands. This method is called internally by Active Storage variants, so Active Storage is vulnerable as well. The vulnerability has been fixed in version 1.12.2 of image_processing. As a workaround, users who process based on user input should always sanitize the user input by allowing only a constrained set of operations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/janko/image_processing/commit/038e4574e8f4f4b636a62394e09983c71980dada; https://github.com/janko/image_processing/security/advisories/GHSA-cxf7-qrc5-9446; https://www.debian.org/security/2022/dsa-5310
CVE: CVE-2022-25010
Published: 2022-03-01
Description: The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-732
References: https://github.com/stepmania/stepmania/pull/2184; https://github.com/stepmania/stepmania/pull/2184
CVE: CVE-2022-25012
Published: 2022-03-01
Description: Argus Surveillance DVR v4.0 employs weak password encryption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-326
References: https://leobreaker1411.github.io/blog/dvr4-hash-crack; https://www.exploit-db.com/exploits/50130; https://leobreaker1411.github.io/blog/dvr4-hash-crack
CVE: CVE-2021-45860
Published: 2022-03-02
Description: An integer overflow in DTSStreamReader::findFrame() of tsMuxer git-2678966 allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/justdan96/tsMuxer/issues/510; https://github.com/justdan96/tsMuxer/pull/511; https://github.com/justdan96/tsMuxer/issues/510
CVE: CVE-2021-45861
Published: 2022-03-02
Description: There is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/justdan96/tsMuxer/issues/478; https://github.com/justdan96/tsMuxer/pull/481; https://github.com/justdan96/tsMuxer/issues/478
CVE: CVE-2021-45863
Published: 2022-03-02
Description: tsMuxer git-2678966 was discovered to contain a heap-based buffer overflow via the function HevcUnit::updateBits in hevc.cpp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/justdan96/tsMuxer/issues/509; https://github.com/justdan96/tsMuxer/pull/512; https://github.com/justdan96/tsMuxer/issues/509
CVE: CVE-2021-45864
Published: 2022-03-02
Description: tsMuxer git-c6a0277 was discovered to contain a segmentation fault via DTSStreamReader::findFrame in dtsStreamReader.cpp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/justdan96/tsMuxer/issues/476; https://github.com/justdan96/tsMuxer/pull/480; https://github.com/justdan96/tsMuxer/issues/476
CVE: CVE-2022-25050
Published: 2022-03-02
Description: rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/merbanan/rtl_433/commit/2dad7b9fc67a1d0bfbe520fbd821678b8f8cc7a8; https://github.com/merbanan/rtl_433/issues/1960; https://huntr.dev/bounties/6c9cd35f-a206-4fdf-b6d1-fcd50926c2d9/
CVE: CVE-2022-25051
Published: 2022-03-02
Description: An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-193
References: https://github.com/merbanan/rtl_433/commit/2dad7b9fc67a1d0bfbe520fbd821678b8f8cc7a8; https://github.com/merbanan/rtl_433/issues/1960; https://huntr.dev/bounties/78eee103-bd61-4b4f-b054-04ad996b39e7/
CVE: CVE-2022-0577
Published: 2022-03-02
Description: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://github.com/scrapy/scrapy/commit/8ce01b3b76d4634f55067d6cfdf632ec70ba304a; https://huntr.dev/bounties/3da527b1-2348-4f69-9e88-2e11a96ac585; https://lists.debian.org/debian-lts-announce/2022/03/msg00021.html
CVE: CVE-2021-44166
Published: 2022-03-02
Description: An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny button is clicked by the legitimate user.
CVSS Score: 4.1 (MEDIUM)
References: https://fortiguard.com/psirt/FG-IR-21-210; https://fortiguard.com/psirt/FG-IR-21-210
CVE: CVE-2022-22301
Published: 2022-03-02
Description: An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0 through 5.2.1 may allow an authenticated attacker to execute unauthorized commands by running CLI commands with specifically crafted arguments.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-21-227; https://fortiguard.com/psirt/FG-IR-21-227
CVE: CVE-2022-22303
Published: 2022-03-02
Description: An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file.
CVSS Score: 2.8 (LOW)
CWE: CWE-200
References: https://fortiguard.com/psirt/FG-IR-21-165; https://fortiguard.com/psirt/FG-IR-21-165
CVE: CVE-2022-0824
Published: 2022-03-02
Description: Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-863
References: http://packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html; http://packetstormsecurity.com/files/169700/Webmin-1.984-File-Manager-Remote-Code-Execution.html; https://github.com/webmin/webmin/commit/39ea464f0c40b325decd6a5bfb7833fa4a142e38
CVE: CVE-2022-0829
Published: 2022-03-02
Description: Improper Authorization in GitHub repository webmin/webmin prior to 1.990.
CVSS Score: 8.1 (HIGH)
CWE: CWE-285, CWE-863
References: https://github.com/webmin/webmin/commit/eeeea3c097f5cc473770119f7ac61f1dcfa671b9; https://huntr.dev/bounties/f2d0389f-d7d1-4f34-9f9d-268b0a0da05e; https://notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html