deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36014
Published: 2022-09-16
Description: TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list attributes, it crashes. We have patched the issue in GitHub commits 3a754740d5414e362512ee981eefba41561a63a6 and a0f0b9a21c[PII_REDACTED]095092f558fbad4c03e5. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ir/importexport/graphdef_import.cc; https://github.com/tensorflow/tensorflow/commit/3a754740d5414e362512ee981eefba41561a63a6; https://github.com/tensorflow/tensorflow/commit/a0f0b9a21c[PII_REDACTED]095092f558fbad4c03e5
CVE: CVE-2022-36015
Published: 2022-09-16
Description: TensorFlow is an open source platform for machine learning. When `RangeSize` receives values that do not fit into an `int64_t`, it crashes. We have patched the issue in GitHub commit 37e64539cd29fcfb814c4451152a60f5d107b0f0. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-190
References: https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/math_ops.cc; https://github.com/tensorflow/tensorflow/commit/37e64539cd29fcfb814c4451152a60f5d107b0f0; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rh87-q4vg-m45j
CVE: CVE-2022-36016
Published: 2022-09-16
Description: TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a `FullTypeDef& t` that is not exactly three args, it triggers a `CHECK`-fail instead of returning a status. We have patched the issue in GitHub commit 6104f0d4091c260ce9352f9155f7e9b725eab012. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-617
References: https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/math_ops.cc; https://github.com/tensorflow/tensorflow/commit/6104f0d4091c260ce9352f9155f7e9b725eab012; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g468-qj8g-vcjc
CVE: CVE-2022-36017
Published: 2022-09-16
Description: TensorFlow is an open source platform for machine learning. If `Requantize` is given `input_min`, `input_max`, `requested_output_min`, `requested_output_max` tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 785d67a78a1d533759fcd2f5e8d6ef778de849e0. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wqmc-pm8c-2jhc; https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0
CVE: CVE-2022-36027
Published: 2022-09-16
Description: TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. We have patched the issue in GitHub commit aa0b852a4588cea4d36b74feb05d93055540b450. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://github.com/tensorflow/tensorflow/commit/aa0b852a4588cea4d36b74feb05d93055540b450; https://github.com/tensorflow/tensorflow/issues/53767; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-79h2-q768-fpxr
CVE: CVE-2022-39211
Published: 2022-09-16
Description: Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.10.4, 23.0.8 or 24.0.4. There are no known workarounds for this issue.
CVSS Score: 3.0 (LOW)
CWE: CWE-918
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-rmf9-w497-8cq8; https://github.com/nextcloud/server/pull/32988; https://github.com/nextcloud/server/pull/33031
CVE: CVE-2022-40300
Published: 2022-09-16
Description: Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-40300.html; https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-40300.html
CVE: CVE-2022-39210
Published: 2022-09-17
Description: Nextcloud android is the official Android client for the Nextcloud home server platform. Internal paths to the Nextcloud Android app files are not properly protected. As a result access to internal files of the from within the Nextcloud Android app is possible. This may lead to a leak of sensitive information in some cases. It is recommended that the Nextcloud Android app is upgraded to 3.21.0. There are no known workarounds for this issue.
CVSS Score: 3.2 (LOW)
CWE: CWE-22, CWE-200, CWE-22
References: https://github.com/nextcloud/android/pull/10544; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vw2w-gpcv-v39f; https://github.com/nextcloud/android/pull/10544
CVE: CVE-2022-39212
Published: 2022-09-17
Description: Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last video frame of any participant who has video disabled but a camera selected. It is recommended that the Nextcloud Talk app is upgraded to 13.0.8 or 14.0.4. Users unable to upgrade should select "None" as camera before joining the call.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wq3g-2x46-q2gv; https://github.com/nextcloud/spreed/pull/7673; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wq3g-2x46-q2gv
CVE: CVE-2022-39217
Published: 2022-09-17
Description: some-natalie/ghas-to-csv (GitHub Advanced Security to CSV) is a GitHub action which scrapes the GitHub Advanced Security API and shoves it into a CSV. In affected versions this GitHub Action creates a CSV file without sanitizing the output of the APIs. If an alert is dismissed or any other custom field contains executable code / formulas, it might be run when an endpoint opens that CSV file in a spreadsheet program. This issue has been addressed in version `v1`. Users are advised to use `v1` or later. There are no known workarounds for this issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-74
References: https://github.com/some-natalie/ghas-to-csv/commit/d0b521928fa734513b5cd9c7d9d8e09db50e884a; https://github.com/some-natalie/ghas-to-csv/security/advisories/GHSA-634p-93h9-92vh; https://github.com/some-natalie/ghas-to-csv/commit/d0b521928fa734513b5cd9c7d9d8e09db50e884a
CVE: CVE-2022-3173
Published: 2022-09-17
Description: Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://github.com/snipe/snipe-it/commit/dcab1381e7ee0b7fd1df3a34750dbff4b79185b2; https://huntr.dev/bounties/6d8ffcc6-c6e3-4385-8ead-bdbbbacf79e9; https://github.com/snipe/snipe-it/commit/dcab1381e7ee0b7fd1df3a34750dbff4b79185b2
CVE: CVE-2022-3231
Published: 2022-09-17
Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/librenms/librenms/commit/[PII_REDACTED]1230ff96a6507b309cc172a9e70af8; https://huntr.dev/bounties/bcb6ee68-1452-4fdb-932a-f1031d10984f; https://github.com/librenms/librenms/commit/[PII_REDACTED]1230ff96a6507b309cc172a9e70af8
CVE: CVE-2022-39960
Published: 2022-09-17
Description: The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all groups from the Jira instance by making a groupexport_download=true request to a plugins/servlet/groupexportforjira/admin/ URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://gist.github.com/CveCt0r/ca8c6e46f536e9ae69fc6061f132463e; https://marketplace.atlassian.com/apps/1222388/group-export-for-jira/version-history; https://gist.github.com/CveCt0r/ca8c6e46f536e9ae69fc6061f132463e
CVE: CVE-2022-3232
Published: 2022-09-17
Description: Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71; https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c; https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71
CVE: CVE-2022-3234
Published: 2022-09-17
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/vim/vim/commit/c249913edc35c0e666d783bfc21595cf9f7d9e0d; https://huntr.dev/bounties/90fdf374-bf04-4386-8a23-38c83b88f0da; https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE: CVE-2022-40766
Published: 2022-09-18
Description: Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , <?php' substring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/Mr-Akuma/8d84b564fb051caa1b1ea31b24f6b9fb; https://moderncampus.com/products/web-content-management.html; https://gist.github.com/Mr-Akuma/8d84b564fb051caa1b1ea31b24f6b9fb
CVE: CVE-2022-40768
Published: 2022-09-18
Description: drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: http://www.openwall.com/lists/oss-security/2022/09/19/1; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6022f210461fef67e6e676fd8544ca02d1bcfa7a; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/scsi/stex.c
CVE: CVE-2022-25873
Published: 2022-09-18
Description: The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://codepen.io/5v3n-08/pen/MWGKEjY; https://github.com/vuetifyjs/vuetify/commit/ade1434927f55a0eccf3d54f900f24c5fa85a176; https://github.com/vuetifyjs/vuetify/issues/15757
CVE: CVE-2022-40769
Published: 2022-09-18
Description: profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: https://blog.1inch.io/a-vulnerability-disclosed-in-profanity-an-ethereum-vanity-address-tool-68ed7455fc8c; https://github.com/johguse/profanity; https://github.com/johguse/profanity/issues/61
CVE: CVE-2022-40774
Published: 2022-09-18
Description: An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/757; https://github.com/axiomatic-systems/Bento4/issues/757
CVE: CVE-2022-40775
Published: 2022-09-18
Description: An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/758; https://github.com/axiomatic-systems/Bento4/issues/758
CVE: CVE-2022-3235
Published: 2022-09-18
Description: Use After Free in GitHub repository vim/vim prior to 9.0.0490.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/vim/vim/commit/1c3dd8ddcba63c1af5112e567215b3cec2de11d0; https://huntr.dev/bounties/96d5f7a0-a834-4571-b73b-0fe523b941af; https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html
CVE: CVE-2022-40778
Published: 2022-09-19
Description: A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.opswat.com/mdicap/release-notes; https://www.opswat.com/products/metadefender/icap; https://docs.opswat.com/mdicap/release-notes
CVE: CVE-2022-38617
Published: 2022-09-19
Description: SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the voiceAudit:j_id97 parameter at /SVFE2/pages/audit/voiceaudit.jsf.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://bpcbt.com; http://smartvista.com; https://dtro.gitbook.io/note_cve/sql-injection-in-terminal-voice-audit-feature-of-smartvista-svfe2-version-2.2.22-cve-2022-38617
CVE: CVE-2022-1580
Published: 2022-09-19
Description: The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://wpscan.com/vulnerability/7b6f91cd-5a00-49ca-93ff-db7220d2630a; https://wpscan.com/vulnerability/7b6f91cd-5a00-49ca-93ff-db7220d2630a
CVE: CVE-2022-1591
Published: 2022-09-19
Description: The WordPress Ping Optimizer WordPress plugin before 2.35.1.3.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/b1a52c7e-3422-40dd-af5a-ea4c622a87aa; https://wpscan.com/vulnerability/b1a52c7e-3422-40dd-af5a-ea4c622a87aa
CVE: CVE-2022-2567
Published: 2022-09-19
Description: The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/dfa21dde-a9fc-4a35-9602-c3fde907ca54; https://wpscan.com/vulnerability/dfa21dde-a9fc-4a35-9602-c3fde907ca54
CVE: CVE-2022-2709
Published: 2022-09-19
Description: The Float to Top Button WordPress plugin through 2.3.6 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/1c551234-9c59-41a0-ab74-beea2d27df6b; https://wpscan.com/vulnerability/1c551234-9c59-41a0-ab74-beea2d27df6b
CVE: CVE-2022-2710
Published: 2022-09-19
Description: The Scroll To Top WordPress plugin before 1.4.1 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f730f584-2370-49f9-a094-a5bc521671c1; https://wpscan.com/vulnerability/f730f584-2370-49f9-a094-a5bc521671c1
CVE: CVE-2022-2753
Published: 2022-09-19
Description: The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in admin viewing the malicious reservation made
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3c6cc46e-e18a-4f34-ac09-f30ca74a1182; https://wpscan.com/vulnerability/3c6cc46e-e18a-4f34-ac09-f30ca74a1182
CVE: CVE-2022-2754
Published: 2022-09-19
Description: The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not validate and escape some reservation parameters before using them in SQL statements, which could allow unauthenticated attackers to perform SQL Injection attacks
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5; https://wpscan.com/vulnerability/e3c6d137-ff6e-432a-a21a-b36dc81f73c5
CVE: CVE-2022-2840
Published: 2022-09-19
Description: The Zephyr Project Manager WordPress plugin before 3.2.5 does not sanitise and escape various parameters before using them in SQL statements via various AJAX actions available to both unauthenticated and authenticated users, leading to SQL injections
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/168652/WordPress-Zephyr-Project-Manager-3.2.42-SQL-Injection.html; https://wpscan.com/vulnerability/13d8be88-c3b7-4d6e-9792-c98b801ba53c; http://packetstormsecurity.com/files/168652/WordPress-Zephyr-Project-Manager-3.2.42-SQL-Injection.html
CVE: CVE-2022-2958
Published: 2022-09-19
Description: The BadgeOS WordPress plugin before 3.7.1.3 does not sanitise and escape parameters before using them in SQL statements via AJAX actions available to any authenticated users, leading to SQL Injections
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/8743534f-8ebd-496a-99bc-5052a8bac86a; https://wpscan.com/vulnerability/8743534f-8ebd-496a-99bc-5052a8bac86a
CVE: CVE-2022-38341
Published: 2022-09-19
Description: Safe Software FME Server v2021.2.5 and below does not employ server-side validation.
CVSS Score: 7.1 (HIGH)
References: https://community.safe.com/s/article/Known-Issue-Lack-of-server-side-validation-when-creating-a-new-user-in-FME-Server; https://www.cycura.com/blog/safe-software-inc-fme-server-vulnerability-disclosure/; https://community.safe.com/s/article/Known-Issue-Lack-of-server-side-validation-when-creating-a-new-user-in-FME-Server
CVE: CVE-2022-38880
Published: 2022-09-19
Description: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/democritus-project/d8s-urls/issues/8; https://pypi.org/project/democritus-strings/; https://github.com/democritus-project/d8s-urls/issues/8
CVE: CVE-2022-3021
Published: 2022-09-19
Description: The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3c5ff229-85c2-49c2-8fb9-6419a8002a4e; https://wpscan.com/vulnerability/3c5ff229-85c2-49c2-8fb9-6419a8002a4e
CVE: CVE-2022-3036
Published: 2022-09-19
Description: The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0dbc85dd-736c-492e-9db8-acb7195771aa; https://wpscan.com/vulnerability/0dbc85dd-736c-492e-9db8-acb7195771aa
CVE: CVE-2022-3141
Published: 2022-09-19
Description: The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/171479/WordPress-Translatepress-Multilingual-SQL-Injection.html; https://medium.com/%40elias.hohl/authenticated-sql-injection-vulnerability-in-translatepress-multilingual-wordpress-plugin-effc08eda514; https://wpscan.com/vulnerability/1fa355d1-cca8-4b27-9d21-0b420a2e1bf3
CVE: CVE-2022-3142
Published: 2022-09-19
Description: The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. The attack can be executed by anyone who is permitted to view the forms statistics chart, by default administrators, however can be configured otherwise via the plugin settings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/171477/WordPress-NEX-Forms-SQL-Injection.html; https://medium.com/%40elias.hohl/authenticated-sql-injection-vulnerability-in-nex-forms-wordpress-plugin-35b8558dd0f5; https://wpscan.com/vulnerability/8acc0fc6-efe6-4662-b9ac-6342a7823328
CVE: CVE-2022-40067
Published: 2022-09-19
Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/9; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/9
CVE: CVE-2022-40068
Published: 2022-09-19
Description: Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/10; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/10
CVE: CVE-2022-40069
Published: 2022-09-19
Description: ]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/6; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/6
CVE: CVE-2022-40070
Published: 2022-09-19
Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/8; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/8
CVE: CVE-2022-40071
Published: 2022-09-19
Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/2; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/2
CVE: CVE-2022-40072
Published: 2022-09-19
Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/7; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/7
CVE: CVE-2022-40073
Published: 2022-09-19
Description: Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/5; https://github.com/xxy1126/Vuln/tree/main/Tenda%20AC21/5