deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-26976
Published: 2022-06-02
Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is leads to reflected XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.barco.com/en/support/knowledge-base/KB12682; https://www.barco.com/en/support/transform-n-management-server; https://www.barco.com/en/support/knowledge-base/KB12682
CVE: CVE-2022-26977
Published: 2022-06-02
Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization of the upload mechanism is leads to stored XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.barco.com/en/support/knowledge-base/KB12683; https://www.barco.com/en/support/transform-n-management-server; https://www.barco.com/en/support/knowledge-base/KB12683
CVE: CVE-2022-26978
Published: 2022-06-02
Description: Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, leading to reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.barco.com/en/support/knowledge-base/KB12686; https://www.barco.com/en/support/transform-n-management-server; https://www.barco.com/en/support/knowledge-base/KB12686
CVE: CVE-2022-27184
Published: 2022-06-02
Description: The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02; https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02
CVE: CVE-2022-27774
Published: 2022-06-02
Description: An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://hackerone.com/reports/1543773; https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html; https://security.gentoo.org/glsa/202212-01
CVE: CVE-2022-27775
Published: 2022-06-02
Description: An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://hackerone.com/reports/1546268; https://security.gentoo.org/glsa/202212-01; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-27776
Published: 2022-06-02
Description: A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://hackerone.com/reports/1547048; https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
CVE: CVE-2022-27778
Published: 2022-06-02
Description: A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.
CVSS Score: 8.1 (HIGH)
CWE: CWE-706, CWE-706
References: https://hackerone.com/reports/1553598; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-27779
Published: 2022-06-02
Description: libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie engine" can bebuilt with or without [Public Suffix List](https://publicsuffix.org/)awareness. If PSL support not provided, a more rudimentary check exists to atleast prevent cookies from being set on TLDs. This check was broken if thehost name in the URL uses a trailing dot.This can allow arbitrary sites to set cookies that then would get sent to adifferent and unrelated site or domain.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-201
References: https://hackerone.com/reports/1553301; https://security.gentoo.org/glsa/202212-01; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-27780
Published: 2022-06-02
Description: The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.
CVSS Score: 7.5 (HIGH)
CWE: CWE-177, CWE-918
References: https://hackerone.com/reports/1553841; https://security.gentoo.org/glsa/202212-01; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-27781
Published: 2022-06-02
Description: libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-835, CWE-835
References: https://hackerone.com/reports/1555441; https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html; https://security.gentoo.org/glsa/202212-01
CVE: CVE-2022-27782
Published: 2022-06-02
Description: libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.
CVSS Score: 7.5 (HIGH)
CWE: CWE-840, CWE-295, CWE-295
References: http://www.openwall.com/lists/oss-security/2023/03/20/6; https://hackerone.com/reports/1555796; https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
CVE: CVE-2022-28605
Published: 2022-06-02
Description: Hardcoded admin token in SoundBar apps in Linkplay SDK 1.00 allows remote attackers to gain admin privilege access in linkplay antifactory
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gist.github.com/zachi40/1f8d174939684c07f5e32ee039ce9acf; https://gist.github.com/zachi40/1f8d174939684c07f5e32ee039ce9acf
CVE: CVE-2022-28690
Published: 2022-06-02
Description: The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-824
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02; https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02
CVE: CVE-2022-28702
Published: 2022-06-02
Description: Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://search.abb.com/library/Download.aspx?DocumentID=2%20CMT%200%200%206%200%208%206&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=2%20CMT%200%200%206%200%208%206&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-28799
Published: 2022-06-02
Description: The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL (unvalidated deeplink) can force the com.zhiliaoapp.musically WebView to load an arbitrary website. This may allow an attacker to leverage an attached JavaScript interface for the takeover with one click.
CVSS Score: 8.8 (HIGH)
CWE: CWE-425
References: https://github.com/Ch0pin/security-advisories/security/advisories/GHSA-v39p-88q5-5cvr; https://hackerone.com/reports/1500614; https://support.tiktok.com/en/safety-hc/reporting-security-vulnerabilities/reporting-the-security-vulnerabilities
CVE: CVE-2022-28945
Published: 2022-06-02
Description: An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://webbank.com; http://wecube.com; https://github.com/WeBankPartners/wecube-platform/issues/2324
CVE: CVE-2022-29483
Published: 2022-06-02
Description: Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://search.abb.com/library/Download.aspx?DocumentID=2%20CMT%200%200%206%200%208%206&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=2%20CMT%200%200%206%200%208%206&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-29488
Published: 2022-06-02
Description: The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-824
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02; https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02
CVE: CVE-2022-29540
Published: 2022-06-02
Description: resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject arbitrary web script or HTML into an HTTP GET parameter that reflects user input without sanitization. This exists on numerous application endpoints,
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.resi.it/prodotti-soluzioni-commerciali/gemini-network-service-monitoring; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2022-29598
Published: 2022-06-02
Description: Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an reflected Cross-Site Scripting (XSS) vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx .
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TheGetch/CVE-2022-29598; https://solutions-atlantic.com/rrs/; https://github.com/TheGetch/CVE-2022-29598
CVE: CVE-2022-29624
Published: 2022-06-02
Description: An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://gitee.com/happy_source/tpcms; https://gitee.com/happy_source/tpcms/issues/I533KY; https://gitee.com/happy_source/tpcms
CVE: CVE-2022-29627
Published: 2022-06-02
Description: An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/nsparker1337/OpenSource/blob/main/exploit_idor.md; https://github.com/nsparker1337/OpenSource/blob/main/exploit_idor.md
CVE: CVE-2022-29628
Published: 2022-06-02
Description: A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nsparker1337/OpenSource/blob/main/exploit_rxss.md; https://github.com/nsparker1337/OpenSource/blob/main/exploit_rxss.md
CVE: CVE-2022-29647
Published: 2022-06-02
Description: An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gist.github.com/aaaahuia/f708c6c8a320e0f3afbb9247903c4670; https://gist.github.com/aaaahuia/f708c6c8a320e0f3afbb9247903c4670
CVE: CVE-2022-29648
Published: 2022-06-02
Description: A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jflyfox/jfinal_cms/issues/34; https://github.com/jflyfox/jfinal_cms/issues/34
CVE: CVE-2022-29653
Published: 2022-06-02
Description: OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/oufu/ofcms/issues/I53COA; https://gitee.com/oufu/ofcms/issues/I53COA
CVE: CVE-2022-29659
Published: 2022-06-02
Description: Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/158391/responsiveonlineblog10poc-sql.txt; https://www.sourcecodester.com/php/14194/responsive-online-blog-website-using-phpmysql.html; https://www.sourcecodester.com/php/14194/responsive-online-blog-website-using-phpmysql.html.aa
CVE: CVE-2022-29692
Published: 2022-06-02
Description: Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/unicorn-engine/unicorn/issues/1578; https://github.com/unicorn-engine/unicorn/issues/1578
CVE: CVE-2022-29693
Published: 2022-06-02
Description: Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/unicorn-engine/unicorn/commit/469fc4c35a0cfabdbefb158e22d145f4ee6f77b9; https://github.com/unicorn-engine/unicorn/issues/1586; https://github.com/unicorn-engine/unicorn/commit/469fc4c35a0cfabdbefb158e22d145f4ee6f77b9
CVE: CVE-2022-29694
Published: 2022-06-02
Description: Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/unicorn-engine/unicorn/commit/3d3deac5e6d38602b689c4fef5dac004f07a2e63; https://github.com/unicorn-engine/unicorn/issues/1588; https://github.com/unicorn-engine/unicorn/pull/1593/commits/31389e59457f304be3809f9679f91a42daa7ebaa
CVE: CVE-2022-29695
Published: 2022-06-02
Description: Unicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine initialization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: https://github.com/unicorn-engine/unicorn/commit/5a79d7879ca3ee0ce684ad6576d8ac15e8d90fc7; https://github.com/unicorn-engine/unicorn/issues/1595; https://github.com/unicorn-engine/unicorn/commit/5a79d7879ca3ee0ce684ad6576d8ac15e8d90fc7
CVE: CVE-2022-29711
Published: 2022-06-02
Description: LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/librenms/librenms/commit/cc6112b8fb36039b862b42d86eb79ef7ee89d31b; https://github.com/librenms/librenms/pull/13931; https://github.com/librenms/librenms/commit/cc6112b8fb36039b862b42d86eb79ef7ee89d31b
CVE: CVE-2022-29712
Published: 2022-06-02
Description: LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/librenms/librenms/pull/13932; https://github.com/librenms/librenms/pull/13932
CVE: CVE-2022-29725
Published: 2022-06-02
Description: An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/Creatiwity/wityCMS/issues/161; https://github.com/Creatiwity/wityCMS/issues/161
CVE: CVE-2022-29729
Published: 2022-06-02
Description: Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password generation algorithm which generates passwords that are accessible to unauthenticated attackers via the webUI login page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://www.verizon.com/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5701.php; https://www.verizon.com/
CVE: CVE-2022-29730
Published: 2022-06-02
Description: USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.pusr.com/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5705.php; https://www.pusr.com/
CVE: CVE-2022-29731
Published: 2022-06-02
Description: An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-916
References: https://www.ict.co/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5700.php; https://www.ict.co/
CVE: CVE-2022-29732
Published: 2022-06-02
Description: Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.deltacontrols.com/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5703.php; https://www.deltacontrols.com/
CVE: CVE-2022-29733
Published: 2022-06-02
Description: Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://www.deltacontrols.com/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5704.php; https://www.deltacontrols.com/
CVE: CVE-2022-29734
Published: 2022-06-02
Description: A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ict.co/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5699.php; https://www.ict.co/
CVE: CVE-2022-29735
Published: 2022-06-02
Description: Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.deltacontrols.com/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5702.php; https://www.deltacontrols.com/
CVE: CVE-2022-29776
Published: 2022-06-02
Description: Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#601; https://github.com/ONLYOFFICE/core/commit/88cf60a3ed4a2b40d71a1c2ced72fa3902a30967; https://github.com/moehw/poc_exploits/tree/master/CVE-2022-29776
CVE: CVE-2022-29777
Published: 2022-06-02
Description: Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#601; https://github.com/ONLYOFFICE/core/commit/b17d5e860f30e8be2caeb0022b63be4c76660178; https://github.com/moehw/poc_exploits/tree/master/CVE-2022-29777
CVE: CVE-2022-29779
Published: 2022-06-02
Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/nginx/njs/commit/2e00e[PII_REDACTED]6aa8538be87db07699d9f676d; https://github.com/nginx/njs/issues/485; https://github.com/nginx/njs/commit/2e00e[PII_REDACTED]6aa8538be87db07699d9f676d
CVE: CVE-2022-29780
Published: 2022-06-02
Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/nginx/njs/commit/8b39afdad9a0761e0a5d4af1a762bd9a6daef572; https://github.com/nginx/njs/issues/486; https://github.com/nginx/njs/commit/8b39afdad9a0761e0a5d4af1a762bd9a6daef572
CVE: CVE-2022-29788
Published: 2022-06-02
Description: libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mobi file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/bfabiszewski/libmobi/commit/ce0ab[PII_REDACTED]b1e8e2a42f44318e581c39939; https://github.com/bfabiszewski/libmobi/commit/ce0ab[PII_REDACTED]b1e8e2a42f44318e581c39939
CVE: CVE-2022-30034
Published: 2022-06-02
Description: Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes.
CVSS Score: 8.6 (HIGH)
CWE: CWE-287
References: http://githubcommherflower.com; https://github.com/mher/flower/issues/1217; https://tprynn.github.io/2022/05/26/flower-vulns.html
CVE: CVE-2022-30115
Published: 2022-06-02
Description: Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-325, CWE-319
References: http://www.openwall.com/lists/oss-security/2022/10/26/4; http://www.openwall.com/lists/oss-security/2022/12/21/1; https://hackerone.com/reports/1557449
CVE: CVE-2022-30277
Published: 2022-06-02
Description: BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://cybersecurity.bd.com/bulletins-and-patches/bd-synapsys-insufficient-session-expiration; https://cybersecurity.bd.com/bulletins-and-patches/bd-synapsys-insufficient-session-expiration
CVE: CVE-2022-30324
Published: 2022-06-02
Description: HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact stanza in submitted jobs onto the client agent host. Fixed in 1.1.14, 1.2.8, and 1.3.1.
CVSS Score: 9.8 (CRITICAL)
References: https://discuss.hashicorp.com; https://discuss.hashicorp.com/t/hcsec-2022-14-nomad-impacted-by-go-getter-vulnerabilities/39932; https://discuss.hashicorp.com
CVE: CVE-2022-30349
Published: 2022-06-02
Description: siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/siteserver/cms/issues/3238; https://github.com/siteserver/cms/issues/3238