deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-45931
Published: 2022-11-27
Description: A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://git.opendaylight.org/gerrit/c/aaa/+/103243; https://jira.opendaylight.org/browse/AAA-241; https://git.opendaylight.org/gerrit/c/aaa/+/103243
CVE: CVE-2022-45932
Published: 2022-11-27
Description: A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://git.opendaylight.org/gerrit/c/aaa/+/103241; https://jira.opendaylight.org/browse/AAA-239; https://git.opendaylight.org/gerrit/c/aaa/+/103241
CVE: CVE-2022-45933
Published: 2022-11-27
Description: KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and retrieves certificate files that can be used for authentication as kube-admin. NOTE: the vendor's position is that KubeView was a "fun side project and a learning exercise," and not "very secure."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://github.com/benc-uk/kubeview/issues/95; https://github.com/benc-uk/kubeview/issues/95
CVE: CVE-2022-43705
Published: 2022-11-27
Description: In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295, CWE-295
References: https://github.com/randombit/botan/releases/tag/2.19.3; https://github.com/randombit/botan/security/advisories/GHSA-4v9w-qvcq-6q7w; https://github.com/randombit/botan/releases/tag/2.19.3
CVE: CVE-2022-45934
Published: 2022-11-27
Description: An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=ae4569813a6e931258db627cdfe50dfb4f917d5d; https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE: CVE-2022-45939
Published: 2022-11-28
Description: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=d48bb4874bc6cd3e69c7a15fc3c91cc141025c51; https://lists.debian.org/debian-lts-announce/2022/12/msg00046.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOSK3J7BBAEI4IITW2DRUKLQYUZYKH6Y/
CVE: CVE-2022-43588
Published: 2022-11-28
Description: A null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1647; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1647
CVE: CVE-2022-43589
Published: 2022-11-28
Description: A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1648; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1648
CVE: CVE-2022-43590
Published: 2022-11-28
Description: A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1649; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1649
CVE: CVE-2022-36193
Published: 2022-11-28
Description: SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-36193/POC.md; https://github.com/lahirudanushka/School-Management-System---PHP-MySQL; https://github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-36193/POC.md
CVE: CVE-2022-38900
Published: 2022-11-28
Description: decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://github.com/SamVerschueren/decode-uri-component/issues/5; https://github.com/sindresorhus/query-string/issues/345; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM/
CVE: CVE-2022-4020
Published: 2022-11-28
Description: Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.



CVSS Score: 8.1 (HIGH)
CWE: CWE-276, CWE-276
References: https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings; https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings
CVE: CVE-2021-25059
Published: 2022-11-28
Description: The Download Plugin WordPress plugin before 2.0.0 does not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as subscriber) to download a full copy of the website.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/b125a765-a6b6-421b-bd8a-effec12bc629; https://wpscan.com/vulnerability/b125a765-a6b6-421b-bd8a-effec12bc629
CVE: CVE-2022-2311
Published: 2022-11-28
Description: The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/287a14dc-d1fc-481d-84af-7eb172dc68c9; https://wpscan.com/vulnerability/287a14dc-d1fc-481d-84af-7eb172dc68c9
CVE: CVE-2022-2983
Published: 2022-11-28
Description: The Salat Times WordPress plugin before 3.2.2 does not sanitize and escapes its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/e2af8c7f-9bd4-4902-8df8-72ffb414fdbf; https://wpscan.com/vulnerability/e2af8c7f-9bd4-4902-8df8-72ffb414fdbf
CVE: CVE-2022-3490
Published: 2022-11-28
Description: The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca78861136; https://wpscan.com/vulnerability/0c9f22e0-1d46-4957-9ba5-5cca78861136
CVE: CVE-2022-3511
Published: 2022-11-28
Description: The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user making the request, allowing a low privileged user, such as subscriber to download arbitrary exported tickets via an IDOR vector
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/9e57285a-0023-4711-874c-6e7b3c2673d1; https://wpscan.com/vulnerability/9e57285a-0023-4711-874c-6e7b3c2673d1
CVE: CVE-2022-3601
Published: 2022-11-28
Description: The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/28b7ee77-5826-4c98-b09a-8f197e1a6d18; https://wpscan.com/vulnerability/28b7ee77-5826-4c98-b09a-8f197e1a6d18
CVE: CVE-2022-3603
Published: 2022-11-28
Description: The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/376e2bc7-2eb9-4e0a-809c-1582940ebdc7; https://wpscan.com/vulnerability/376e2bc7-2eb9-4e0a-809c-1582940ebdc7
CVE: CVE-2022-3610
Published: 2022-11-28
Description: The Jeeng Push Notifications WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/33b52dd7-613f-46e4-b8ee-beddd31689eb; https://wpscan.com/vulnerability/33b52dd7-613f-46e4-b8ee-beddd31689eb
CVE: CVE-2022-3689
Published: 2022-11-28
Description: The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/e9c551a3-7482-4421-8197-5886d028776c; https://wpscan.com/vulnerability/e9c551a3-7482-4421-8197-5886d028776c
CVE: CVE-2022-3768
Published: 2022-11-28
Description: The WPSmartContracts WordPress plugin before 1.3.12 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as author
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://bulletin.iese.de/post/wp-smart-contracts_1-3-11/; https://wpscan.com/vulnerability/1d8bf5bb-5a17-49b7-a5ba-5f2866e1f8a3; https://bulletin.iese.de/post/wp-smart-contracts_1-3-11/
CVE: CVE-2022-3769
Published: 2022-11-28
Description: The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as contributor
CVSS Score: 8.8 (HIGH)
References: https://bulletin.iese.de/post/owm-weather_5-6-8/; https://wpscan.com/vulnerability/2f9ffc1e-c8a9-47bb-a76b-d043c93e63f8; https://bulletin.iese.de/post/owm-weather_5-6-8/
CVE: CVE-2022-3822
Published: 2022-11-28
Description: The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/48ec2e4a-0190-4f36-afd1-d5799ba28c13; https://wpscan.com/vulnerability/48ec2e4a-0190-4f36-afd1-d5799ba28c13
CVE: CVE-2022-3823
Published: 2022-11-28
Description: The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/a072b091-5e5f-4e88-bd3d-2f4582e6564e; https://wpscan.com/vulnerability/a072b091-5e5f-4e88-bd3d-2f4582e6564e; https://wpscan.com/vulnerability/a072b091-5e5f-4e88-bd3d-2f4582e6564e/
CVE: CVE-2022-3824
Published: 2022-11-28
Description: The WP Admin UI Customize WordPress plugin before 1.5.13 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/3ca6d724-cd79-4e07-b8d0-a8c1688abf16; https://wpscan.com/vulnerability/3ca6d724-cd79-4e07-b8d0-a8c1688abf16
CVE: CVE-2022-3828
Published: 2022-11-28
Description: The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/4188ed01-b64b-4aba-a215-e8dc5b308486; https://wpscan.com/vulnerability/4188ed01-b64b-4aba-a215-e8dc5b308486
CVE: CVE-2022-3831
Published: 2022-11-28
Description: The reCAPTCHA WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/fa23bd68-69f3-440e-902c-a3bb6c8a40b8; https://wpscan.com/vulnerability/fa23bd68-69f3-440e-902c-a3bb6c8a40b8
CVE: CVE-2022-3833
Published: 2022-11-28
Description: The Fancier Author Box by ThematoSoup WordPress plugin through 1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/41096d40-83d4-40b4-9632-afef51e8b00e; https://wpscan.com/vulnerability/41096d40-83d4-40b4-9632-afef51e8b00e
CVE: CVE-2022-3834
Published: 2022-11-28
Description: The Google Forms WordPress plugin through 0.95 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1dbe0f24-b757-49fe-846f-7c259df9f361; https://wpscan.com/vulnerability/1dbe0f24-b757-49fe-846f-7c259df9f361
CVE: CVE-2022-3839
Published: 2022-11-28
Description: The Analytics for WP WordPress plugin through 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/809cea63-9dbe-495c-8388-e294299d3e90; https://wpscan.com/vulnerability/809cea63-9dbe-495c-8388-e294299d3e90
CVE: CVE-2022-3847
Published: 2022-11-28
Description: The Showing URL in QR Code WordPress plugin through 0.0.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin or editor add Stored XSS payloads via a CSRF attack
CVSS Score: 6.1 (MEDIUM)
References: https://bulletin.iese.de/post/get-site-to-phone-by-qr-code_0-0-1/; https://wpscan.com/vulnerability/a70ad549-2e09-44fb-b894-4271ad4a84f6; https://bulletin.iese.de/post/get-site-to-phone-by-qr-code_0-0-1/
CVE: CVE-2022-3848
Published: 2022-11-28
Description: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://bulletin.iese.de/post/wp-user-merger_1-5-1_2/; https://wpscan.com/vulnerability/da1f0313-2576-490e-a95f-bf12de340610; https://bulletin.iese.de/post/wp-user-merger_1-5-1_2/
CVE: CVE-2022-3849
Published: 2022-11-28
Description: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin
CVSS Score: 8.8 (HIGH)
References: https://bulletin.iese.de/post/wp-user-merger_1-5-1_3/; https://wpscan.com/vulnerability/511327d3-499b-4ad9-8fd3-99f9f7deb4f5; https://bulletin.iese.de/post/wp-user-merger_1-5-1_3/
CVE: CVE-2022-3850
Published: 2022-11-28
Description: The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/8ae42ec0-7e3a-4ea5-8e76-0aae7b92a8e9; https://wpscan.com/vulnerability/8ae42ec0-7e3a-4ea5-8e76-0aae7b92a8e9
CVE: CVE-2022-3865
Published: 2022-11-28
Description: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin
CVSS Score: 8.8 (HIGH)
References: https://bulletin.iese.de/post/wp-user-merger_1-5-1_1/; https://wpscan.com/vulnerability/fbe4aed8-964a-4774-bbc3-d432792bfeb6; https://bulletin.iese.de/post/wp-user-merger_1-5-1_1/
CVE: CVE-2022-31877
Published: 2022-11-28
Description: An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-345, CWE-345
References: http://msi.com; https://patsch.dev/2022/07/08/cve-2022-31877-privilege-escalation-in-msi-centers-msi-terminalserver-exe/; http://msi.com
CVE: CVE-2022-41912
Published: 2022-11-28
Description: The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading to a fixed version.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/170356/crewjam-saml-Signature-Bypass.html; https://github.com/crewjam/saml/commit/aee3fb1edeeaf1088fcb458727e0fd863d277f8b; https://github.com/crewjam/saml/security/advisories/GHSA-j2jp-wvqg-wc2g
CVE: CVE-2022-41921
Published: 2022-11-28
Description: Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlimited length, which can cause a denial of service for other users when posting huge amounts of text. Users should upgrade to version 2.9.0.beta13, where a limit has been introduced. No known workarounds are available.
CVSS Score: 3.5 (LOW)
CWE: CWE-20, CWE-770
References: https://github.com/discourse/discourse/commit/3de765c89524a526ce611e11468d758a471a933f; https://github.com/discourse/discourse/security/advisories/GHSA-mfh7-6cv6-qccc; https://github.com/discourse/discourse/commit/3de765c89524a526ce611e11468d758a471a933f
CVE: CVE-2022-41944
Published: 2022-11-28
Description: Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain conditions, a user can see notifications for topics they no longer have access to. If there is sensitive information in the topic title, it will therefore have been exposed. This issue is patched in stable version 2.8.12, beta version 2.9.0.beta13, and tests-passed version 2.9.0.beta13. There are no workarounds available.
CVSS Score: 3.5 (LOW)
CWE: CWE-200, CWE-863
References: https://github.com/discourse/discourse/commit/c6ee28ec756436cc9ce154dd2c8e4c441f92f693; https://github.com/discourse/discourse/security/advisories/GHSA-354r-jpj5-53c2; https://github.com/discourse/discourse/commit/c6ee28ec756436cc9ce154dd2c8e4c441f92f693
CVE: CVE-2022-41957
Published: 2022-11-28
Description: Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara's predecessor package hummus, are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed. The issue has been patched in muhammara version 3.4.0 and the fix has been backported to version 2.6.2. As a workaround, do not process files from untrusted sources. If using hummus, replace the package with muhammara.
CVSS Score: 7.5 (HIGH)
CWE: CWE-690
References: https://github.com/julianhille/MuhammaraJS/pull/235; https://github.com/julianhille/MuhammaraJS/pull/238; https://github.com/julianhille/MuhammaraJS/security/advisories/GHSA-2r7v-cmch-5x26
CVE: CVE-2022-44283
Published: 2022-11-28
Description: AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://packetstormsecurity.com/files/169427/AVS-Audio-Converter-10.3-Stack-Overflow.html; https://packetstormsecurity.com/files/169427/AVS-Audio-Converter-10.3-Stack-Overflow.html
CVE: CVE-2022-44284
Published: 2022-11-28
Description: Dinstar FXO Analog VoIP Gateway DAG2000-16O is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://packetstormsecurity.com/files/169531/Dinstar-FXO-Analog-VoIP-Gateway-DAG2000-16O-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/169531/Dinstar-FXO-Analog-VoIP-Gateway-DAG2000-16O-Cross-Site-Scripting.html
CVE: CVE-2022-44400
Published: 2022-11-28
Description: Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/lcg-22266/bug_report/blob/main/vendors/oretnom23/Purchase%20Order%20Management%20System/UPLOAD-1.md; https://github.com/lcg-22266/bug_report/blob/main/vendors/oretnom23/Purchase%20Order%20Management%20System/UPLOAD-1.md
CVE: CVE-2022-44401
Published: 2022-11-28
Description: Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/lcg-22266/bug_report/blob/main/mayuri_k/Online%20Tours%20&%20Travels%20management%20system/RCE-1.md; https://github.com/lcg-22266/bug_report/blob/main/mayuri_k/Online%20Tours%20&%20Travels%20management%20system/RCE-1.md
CVE: CVE-2021-45036
Published: 2022-11-28
Description: Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against the server.
CVSS Score: 8.7 (HIGH)
CWE: CWE-290, CWE-287
References: https://doc.velneo.com/v/32/velneo-vserver/funcionalidades/protocolo-vatps; https://doc.velneo.com/v/32/velneo/funcionalidades-comunes/conexion-con-velneo-vserver; https://doc.velneo.com/v/32/velneo/notas-de-la-version#a-partir-de-esta-version-todos-los-servidores-arrancaran-con-protocolo-vatps