deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-37504
Published: 2022-02-25
Description: A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js; http://hayageek.github.io/jQuery-Upload-File/4.0.11/jquery.uploadfile.min.js; http://hayageek.github.io/jQuery-Upload-File/4.0.11/uploadfile.css
CVE: CVE-2021-40043
Published: 2022-02-25
Description: The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerability could execute voice commands on the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220126-01-df75863e-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220126-01-df75863e-en
CVE: CVE-2021-40046
Published: 2022-02-25
Description: PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege.
CVSS Score: 9.8 (CRITICAL)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220216-01-priesc-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220216-01-priesc-en
CVE: CVE-2021-42244
Published: 2022-02-25
Description: A cross-site scripting (XSS) vulnerability in PaquitoSoftware Notimoo v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted title or message in a notification.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/PaquitoSoft/Notimoo/issues/3; https://github.com/PaquitoSoft/Notimoo/issues/3
CVE: CVE-2022-0615
Published: 2022-02-25
Description: Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://support.eset.com/en/ca8230; https://support.eset.com/en/ca8230
CVE: CVE-2022-0655
Published: 2022-02-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-21209
Published: 2022-02-25
Description: The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-055-01; https://www.zerodayinitiative.com/advisories/ZDI-22-435/; https://www.zerodayinitiative.com/advisories/ZDI-22-436/
CVE: CVE-2022-21798
Published: 2022-02-25
Description: The affected product is vulnerable due to cleartext transmission of credentials seen in the CIMPLICITY network, which can be easily spoofed and used to log in to make operational changes to the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-02; https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-02
CVE: CVE-2022-23921
Published: 2022-02-25
Description: Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the server is licensed for multiple projects.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-269
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-01
CVE: CVE-2022-23985
Published: 2022-02-25
Description: The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-055-01; https://www.zerodayinitiative.com/advisories/ZDI-22-432/; https://www.zerodayinitiative.com/advisories/ZDI-22-433/
CVE: CVE-2022-25019
Published: 2022-02-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38602. Reason: This candidate is a reservation duplicate of CVE-2021-38602. Notes: All CVE users should reference CVE-2021-38602 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2022-25170
Published: 2022-02-25
Description: The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-055-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-055-01
CVE: CVE-2021-23495
Published: 2022-02-25
Description: The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://github.com/karma-runner/karma/commit/ff7edbb2ffbcdd69761bece86b7dc1ef0740508d; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2412347; https://snyk.io/vuln/SNYK-JS-KARMA-2396325
CVE: CVE-2021-42952
Published: 2022-02-25
Description: Zepl Notebooks before 2021-10-25 are affected by a sandbox escape vulnerability. Upon launching Remote Code Execution from the Notebook, users can then use that to subsequently escape the running context sandbox and proceed to access internal Zepl assets including cloud metadata services.
CVSS Score: 9.9 (CRITICAL)
References: http://zepl.com; https://seclists.org/fulldisclosure/2022/Feb/32; http://zepl.com
CVE: CVE-2021-44132
Published: 2022-02-25
Description: A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers to execute arbitrary commands via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://exploitwriter.wordpress.com/2021/11/19/remote-code-execution-in-c-data-onu4ferw/; https://exploitwriter.io/2022/02/25/os-command-injection-in-c-data-onu4ferw-cve-2021-44132/; https://exploitwriter.wordpress.com/2021/11/19/remote-code-execution-in-c-data-onu4ferw/
CVE: CVE-2022-24442
Published: 2022-02-25
Description: JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://blog.jetbrains.com; https://www.jetbrains.com/privacy-security/issues-fixed/; https://blog.jetbrains.com
CVE: CVE-2022-25060
Published: 2022-02-25
Description: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://router.com; http://tp-link.com; https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_startPing-EN-939c748c5f[PII_REDACTED]77114b1ca1cf
CVE: CVE-2022-25061
Published: 2022-02-25
Description: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://router.com; http://tp-link.com; https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_setIp6DefaultRoute-EN-ddf9c1db199d[PII_REDACTED]7ada6cb312
CVE: CVE-2022-25062
Published: 2022-02-25
Description: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://router.com; http://tp-link.com; https://east-trowel-102.notion.site/CVE-2021-XXXX-RCE-Integer-Overflow-via-crafted-payload-in-an-DNS-input-field-userDomain-EN-2bc0fafd23224a5a8f86f5f0f9377d3d
CVE: CVE-2022-25064
Published: 2022-02-25
Description: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://router.com; http://tp-link.com; https://east-trowel-102.notion.site/CVE-2021-XXXX-rce-via-crafted-payload-in-an-ipv6-address-input-field-hidden-EN-98e24b6f841043fba17ec4627c34f5d1
CVE: CVE-2022-25259
Published: 2022-02-25
Description: JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://www.jetbrains.com/privacy-security/issues-fixed/; https://blog.jetbrains.com
CVE: CVE-2022-25260
Published: 2022-02-25
Description: JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://blog.jetbrains.com; https://www.jetbrains.com/privacy-security/issues-fixed/; https://blog.jetbrains.com
CVE: CVE-2022-25261
Published: 2022-02-25
Description: JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://www.jetbrains.com/privacy-security/issues-fixed/; https://blog.jetbrains.com
CVE: CVE-2022-25262
Published: 2022-02-25
Description: In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: https://blog.jetbrains.com; https://www.jetbrains.com/privacy-security/issues-fixed/; https://blog.jetbrains.com
CVE: CVE-2022-25263
Published: 2022-02-25
Description: JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.jetbrains.com; https://www.jetbrains.com/privacy-security/issues-fixed/; https://blog.jetbrains.com
CVE: CVE-2022-25264
Published: 2022-02-25
Description: In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases.
CVSS Score: 7.5 (HIGH)
CWE: CWE-922
References: https://blog.jetbrains.com; https://www.jetbrains.com/privacy-security/issues-fixed/; https://blog.jetbrains.com
CVE: CVE-2022-24710
Published: 2022-02-25
Description: Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used in user name and language fields. Due to this improper neutralization it is possible to perform cross-site scripting via these fields. The issues were fixed in the 4.11 release. Users unable to upgrade are advised to add their own neutralize logic.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/WeblateOrg/weblate/commit/22d577b1f1e88665a88b[PII_REDACTED]030e0f8389; https://github.com/WeblateOrg/weblate/commit/9e19a[PII_REDACTED]cc90da2a91c9af5420f2952f1; https://github.com/WeblateOrg/weblate/commit/f6753a1a1c63fade6ad418fbda827c6750ab0bda
CVE: CVE-2022-21706
Published: 2022-02-26
Description: Zulip is an open-source team collaboration tool with topic-based threading. Zulip Server version 2.0.0 and above are vulnerable to insufficient access control with multi-use invitations. A Zulip Server deployment which hosts multiple organizations is vulnerable to an attack where an invitation created in one organization (potentially as a role with elevated permissions) can be used to join any other organization. This bypasses any restrictions on required domains on users' email addresses, may be used to gain access to organizations which are only accessible by invitation, and may be used to gain access with elevated privileges. This issue has been patched in release 4.10. There are no known workarounds for this issue. ### Patches _Has the problem been patched? What versions should users upgrade to?_ ### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ ### References _Are there any links users can visit to find out more?_ ### For more information If you have any questions or comments about this advisory, you can discuss them on the [developer community Zulip server](https://zulip.com/developer-community/), or email the [Zulip security team](mailto:security@zulip.com).
CVSS Score: 7.2 (HIGH)
CWE: CWE-284, CWE-863
References: https://blog.zulip.com/2022/02/25/zulip-cloud-invitation-vulnerability/; https://blog.zulip.com/2022/02/25/zulip-server-4-10-security-release/#cve-2022-21706; https://github.com/zulip/zulip/commit/88917019f[PII_REDACTED]4082cdc0f31a561503f9e
CVE: CVE-2022-25094
Published: 2022-02-26
Description: Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter "cover" in SystemSettings.php.
CVSS Score: 8.8 (HIGH)
References: https://www.exploit-db.com/exploits/50731; https://www.exploit-db.com/exploits/50731
CVE: CVE-2022-25095
Published: 2022-02-26
Description: Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
References: https://www.exploit-db.com/exploits/50730; https://www.exploit-db.com/exploits/50730
CVE: CVE-2022-25096
Published: 2022-02-26
Description: Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/view_member.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Home-Owners-Collection-Management; https://www.exploit-db.com/exploits/50732; https://www.nu11secur1ty.com/2022/02/home-owners-collection-management-10-rce.html
CVE: CVE-2021-46702
Published: 2022-02-26
Description: Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: https://www.sciencedirect.com/science/article/pii/S[PII_REDACTED]001358; https://www.sciencedirect.com/science/article/pii/S[PII_REDACTED]001358
CVE: CVE-2020-36516
Published: 2022-02-26
Description: An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://dl.acm.org/doi/10.1145/3[PII_REDACTED]884; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://dl.acm.org/doi/10.1145/3[PII_REDACTED]884
CVE: CVE-2022-23308
Published: 2022-02-26
Description: valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2022/May/33; http://seclists.org/fulldisclosure/2022/May/34; http://seclists.org/fulldisclosure/2022/May/35
CVE: CVE-2022-24986
Published: 2022-02-26
Description: KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-668
References: http://www.openwall.com/lists/oss-security/2022/02/25/3; https://apps.kde.org/kcron/; http://www.openwall.com/lists/oss-security/2022/02/25/3
CVE: CVE-2022-25359
Published: 2022-02-26
Description: On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: http://files.iclinks.com/datasheets/Scadaflex%20II/Scadaflex%20SC-1%20&%20SC-2_A1_compressed.pdf; https://packetstormsecurity.com/files/166103/ICL-ScadaFlex-II-SCADA-Controllers-SC-1-SC-2-1.03.07-Remote-File-Modification.html; http://files.iclinks.com/datasheets/Scadaflex%20II/Scadaflex%20SC-1%20&%20SC-2_A1_compressed.pdf
CVE: CVE-2022-0762
Published: 2022-02-26
Description: Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://github.com/microweber/microweber/commit/76361264d9fdfff38a1af79c63141455cc4d36e3; https://huntr.dev/bounties/125b5244-5099-485e-bf75-e5f1ed80dd48; https://github.com/microweber/microweber/commit/76361264d9fdfff38a1af79c63141455cc4d36e3
CVE: CVE-2022-0763
Published: 2022-02-26
Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/c897d0dc159849763a813184d9b75b966c6360bf; https://huntr.dev/bounties/6de9c621-740d-4d7a-9d77-d90c6c87f3b6; https://github.com/microweber/microweber/commit/c897d0dc159849763a813184d9b75b966c6360bf
CVE: CVE-2022-0723
Published: 2022-02-26
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/15e519a86e4b24526abaf9e6dc81cb1af86843a5; https://huntr.dev/bounties/16b0547b-1bb3-493c-8a00-5b6a11fca1c5; https://github.com/microweber/microweber/commit/15e519a86e4b24526abaf9e6dc81cb1af86843a5
CVE: CVE-2022-0764
Published: 2022-02-26
Description: Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://github.com/strapi/strapi/commit/2a3f5e988be6a2c7dae5ac22b9e86d579b462f4c; https://github.com/strapi/strapi/issues/12879; https://huntr.dev/bounties/001d1c29-805a-4035-93bb-71a0e81da3e5
CVE: CVE-2020-27958
Published: 2022-02-26
Description: The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-116
References: https://discourse.osc.edu/t/security-fix-in-open-ondemand-1-8-18-and-1-7-19-patch-releases-now-available/1198; https://github.com/OSC/Open-OnDemand/commits/master; https://listsprd.osu.edu/pipermail/ood-users/
CVE: CVE-2022-26146
Published: 2022-02-26
Description: Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md; https://support-hub.tricentis.com/open?id=manual&lang=en&path=%2Fqtest%2F10400%2Fen%2Fcontent%2Fqtest_manager%2Frelease_notes%2Fonpremise_release_notes%2Fmanager_10.4.0_onpremise_release_notes.htm&product=qtest&sessionRotationTrigger=true&type=product_manual&version=10.4.2%20On%20Premise; https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md
CVE: CVE-2022-26149
Published: 2022-02-26
Description: MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/171488/MODX-Revolution-2.8.3-pl-Remote-Code-Execution.html; https://github.com/sartlabs/0days/blob/main/Modx/Exploit.txt; http://packetstormsecurity.com/files/171488/MODX-Revolution-2.8.3-pl-Remote-Code-Execution.html
CVE: CVE-2022-22908
Published: 2022-02-26
Description: SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://github.com/NF-Security-Team/CVEs/tree/main/CVE-2022-22908; https://github.com/NF-Security-Team/CVEs/tree/main/CVE-2022-22908
CVE: CVE-2021-3967
Published: 2022-02-26
Description: Improper Access Control in GitHub repository zulip/zulip prior to 4.10.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://github.com/zulip/zulip/commit/d5db254ca8167995a1654d1c45ffc74b2fade39a; https://huntr.dev/bounties/2928a625-0467-4a0a-b4e2-e[PII_REDACTED]6; https://github.com/zulip/zulip/commit/d5db254ca8167995a1654d1c45ffc74b2fade39a
CVE: CVE-2021-21708
Published: 2022-02-27
Description: In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits.
CVSS Score: 8.2 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugs.php.net/bug.php?id=81708; https://security.gentoo.org/glsa/202209-20; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-0772
Published: 2022-02-27
Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/librenms/librenms/commit/703745d0ed[PII_REDACTED]117d761ce48514e2f281; https://huntr.dev/bounties/faae29bd-c43a-468d-8af6-2b6aa4d40f09; https://github.com/librenms/librenms/commit/703745d0ed[PII_REDACTED]117d761ce48514e2f281
CVE: CVE-2021-43945
Published: 2022-02-28
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or JavaScript via a Stored Cross-Site Scripting (SXSS) vulnerability in the /rest/jpo/1.0/hierarchyConfiguration endpoint. The affected versions are before version 8.20.3.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-73069; https://jira.atlassian.com/browse/JRASERVER-73069
CVE: CVE-2022-26159
Published: 2022-02-28
Description: The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/<domain>/en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML/; https://issues.ametys.org/browse/CMS-10973; https://podalirius.net/en/cves/2022-26159/
CVE: CVE-2020-36510
Published: 2022-02-28
Description: The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cb_s_a AJAX action, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d1dbc6d7-7488-40c2-bc38-0674ea5b3c95; https://wpscan.com/vulnerability/d1dbc6d7-7488-40c2-bc38-0674ea5b3c95
CVE: CVE-2021-24688
Published: 2022-02-28
Description: The Orange Form WordPress plugin through 1.0.1 does not have any authorisation and CSRF checks in all of its AJAX calls, for example the or_delete_filed one which is available to both unauthenticated and authenticated users could allow attackers to delete arbitrary posts.The AJAX calls performing actions on posts also do not ensure that the post belong to them (or that they are allowed to perform such action on it)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-352
References: https://wpscan.com/vulnerability/78bc7cf1-7563-4ada-aec9-af4c943e3e2c; https://wpscan.com/vulnerability/78bc7cf1-7563-4ada-aec9-af4c943e3e2c