deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-39274
Published: 2022-10-06
Description: LoRaMac-node is a reference implementation and documentation of a LoRa network node. Versions of LoRaMac-node prior to 4.7.0 are vulnerable to a buffer overflow. Improper size validation of the incoming radio frames can lead to an 65280-byte out-of-bounds write. The function `ProcessRadioRxDone` implicitly expects incoming radio frames to have at least a payload of one byte or more. An empty payload leads to a 1-byte out-of-bounds read of user controlled content when the payload buffer is reused. This allows an attacker to craft a FRAME_TYPE_PROPRIETARY frame with size -1 which results in an 65280-byte out-of-bounds memcopy likely with partially controlled attacker data. Corrupting a large part if the data section is likely to cause a DoS. If the large out-of-bounds write does not immediately crash the attacker may gain control over the execution due to now controlling large parts of the data section. Users are advised to upgrade either by updating their package or by manually applying the patch commit `e851b079`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-193
References: https://github.com/Lora-net/LoRaMac-node/commit/e851b079c82ba1bcf3f4d291ab69a571b0bf458a; https://github.com/Lora-net/LoRaMac-node/releases/tag/v4.7.0; https://github.com/Lora-net/LoRaMac-node/security/advisories/GHSA-7vv8-73pc-63c2
CVE: CVE-2022-39275
Published: 2022-10-06
Description: Saleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking the ID type input which allowed to access database objects that the authenticated user may not be allowed to access. This vulnerability can be used to expose the following information: Estimating database row counts from tables with a sequential primary key or Exposing staff user and customer email addresses and full name through the `assignNavigation()` mutation. This issue has been patched in main and backported to multiple releases (3.7.17, 3.6.18, 3.5.23, 3.4.24, 3.3.26, 3.2.14, 3.1.24). Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-20
References: https://github.com/saleor/saleor/commit/96e04c092ddcac17b14f2e31554aa02d9006d0ce; https://github.com/saleor/saleor/security/advisories/GHSA-xhq8-8c5v-w8ff; https://github.com/saleor/saleor/commit/96e04c092ddcac17b14f2e31554aa02d9006d0ce
CVE: CVE-2022-39280
Published: 2022-10-06
Description: dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A patch has been applied in version `0.5.2`, all the users are advised to upgrade to `0.5.2` as soon as possible. Users unable to upgrade should avoid passing index server URLs in the source file to be parsed.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-1333
References: https://github.com/pyupio/dparse/commit/8c990170bbd6c0cf212f1151e[PII_REDACTED]062d5; https://github.com/pyupio/dparse/commit/d87364f9db9ab916451b1b036cfeb039e726e614; https://github.com/pyupio/dparse/security/advisories/GHSA-8fg9-p83m-x5pq
CVE: CVE-2022-39988
Published: 2022-10-06
Description: A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the Service>Templates service_alias parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/168585/Centreon-22.04.0-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/168585/Centreon-22.04.0-Cross-Site-Scripting.html
CVE: CVE-2022-3002
Published: 2022-10-06
Description: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/yetiforcecompany/yetiforcecrm/commit/54728becfdad9b6e686bbe336007cba2ce518248; https://huntr.dev/bounties/d213d7ea-fe92-40b2-a1f9-2ba32dec50f5; https://github.com/yetiforcecompany/yetiforcecrm/commit/54728becfdad9b6e686bbe336007cba2ce518248
CVE: CVE-2022-3273
Published: 2022-10-06
Description: Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-770, CWE-326
References: https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8; https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6; https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8
CVE: CVE-2022-3376
Published: 2022-10-06
Description: Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-521, CWE-521
References: https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9; https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed; https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9
CVE: CVE-2022-3389
Published: 2022-10-06
Description: Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99; https://huntr.dev/bounties/f7d2a6ab-2faf-4719-bdb6-e4e5d6065752; https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99
CVE: CVE-2022-3396
Published: 2022-10-06
Description: OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04; https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04
CVE: CVE-2022-3397
Published: 2022-10-06
Description: OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04; https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04
CVE: CVE-2022-3398
Published: 2022-10-06
Description: OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04; https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04
CVE: CVE-2022-40157
Published: 2022-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-40158
Published: 2022-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-40159
Published: 2022-10-06
Description: ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47057; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47057
CVE: CVE-2022-40160
Published: 2022-10-06
Description: ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47053; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47053
CVE: CVE-2022-40161
Published: 2022-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-40895
Published: 2022-10-06
Description: In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated, remote attacker to affect the integrity of a device via a User Enumeration vulnerability. The vulnerability is due to insecure design, where a difference in forgot password utility could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. This affects NeDi 1.0.7 for OS X 1.0.7 <= and NeDi for Suse 1.0.7 <= and NeDi for FreeBSD 1.0.7 <=.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-203
References: http://forum.nedi.ch/index.php; https://gist.github.com/UditChavda/2f2effa477a429b485ae7e2dc3bbd04f; https://www.nedi.ch/
CVE: CVE-2022-41294
Published: 2022-10-06
Description: IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/236807; https://www.ibm.com/support/pages/node/6825985; https://exchange.xforce.ibmcloud.com/vulnerabilities/236807
CVE: CVE-2022-41517
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/TOTOLink-NR1800X-f97f2b9552c04eaf85fce31bccbfcf04; https://brief-nymphea-813.notion.site/TOTOLink-NR1800X-f97f2b9552c04eaf85fce31bccbfcf04
CVE: CVE-2022-41518
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://brief-nymphea-813.notion.site/NR1800X-command-injection-UploadFirmwareFile-a98e96086d824b7d8b788a[PII_REDACTED]; https://brief-nymphea-813.notion.site/NR1800X-command-injection-UploadFirmwareFile-a98e96086d824b7d8b788a[PII_REDACTED]
CVE: CVE-2022-41520
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File parameter in the UploadCustomModule function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/NR1800X-bof-UploadCustomModule-2bcabf[PII_REDACTED]b9a238fab938d782; https://brief-nymphea-813.notion.site/NR1800X-bof-UploadCustomModule-2bcabf[PII_REDACTED]b9a238fab938d782
CVE: CVE-2022-41521
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort parameter in the setIpPortFilterRules function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/NR1800X-bof-setIpPortFilterRules-fd99f83f37ad40fab7d7b376942633d2; https://brief-nymphea-813.notion.site/NR1800X-bof-setIpPortFilterRules-fd99f83f37ad40fab7d7b376942633d2
CVE: CVE-2022-41556
Published: 2022-10-06
Description: A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://git.lighttpd.net/lighttpd/lighttpd1.4/commit/b18de6f9264f914f7bf493abd3b[PII_REDACTED]e50; https://github.com/lighttpd/lighttpd1.4/compare/lighttpd-1.4.66...lighttpd-1.4.67; https://github.com/lighttpd/lighttpd1.4/pull/115
CVE: CVE-2022-41852
Published: 2022-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-41853
Published: 2022-10-06
Description: Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can be prevented by updating to 2.7.1 or by setting the system property "hsqldb.method_class_names" to classes which are allowed to be called. For example, System.setProperty("hsqldb.method_class_names", "abc") or Java argument -Dhsqldb.method_class_names="abc" can be used. From version 2.7.1 all classes by default are not accessible except those in java.lang.Math and need to be manually enabled.
CVSS Score: 8.0 (HIGH)
CWE: CWE-470
References: http://hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50212#c7; https://lists.debian.org/debian-lts-announce/2022/12/msg00020.html
CVE: CVE-2022-42241
Published: 2022-10-06
Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-3.md; https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-3.md
CVE: CVE-2022-42242
Published: 2022-10-06
Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-2.md; https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-2.md
CVE: CVE-2022-42243
Published: 2022-10-06
Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md; https://github.com/aabbcc8997/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE: CVE-2022-42249
Published: 2022-10-06
Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/fateroot/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-2.md; https://github.com/fateroot/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-2.md
CVE: CVE-2022-42250
Published: 2022-10-06
Description: Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/fateroot/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md; https://github.com/fateroot/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md
CVE: CVE-2022-42457
Published: 2022-10-06
Description: Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_update in /usr/bin/gxserve-update.sh (e.g., command execution can occur via a reverse shell installed by install.sh).
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/hubertfarnsworth12/Generex-CS141-Authenticated-Remote-Command-Execution; https://github.dev/hubertfarnsworth12/Generex-CS141-Authenticated-Remote-Command-Execution; https://www.generex.de/products/ups/
CVE: CVE-2022-41522
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/NR1800X-bof-main-pre-authentication-29ccdaa7af054674828f7b3cf38aae82; https://brief-nymphea-813.notion.site/NR1800X-bof-main-pre-authentication-29ccdaa7af054674828f7b3cf38aae82
CVE: CVE-2022-41523
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/NR1800X-bof-setTracerouteCfg-0e29fc2fcba74a28a3e3822d71ddb2ef; https://brief-nymphea-813.notion.site/NR1800X-bof-setTracerouteCfg-0e29fc2fcba74a28a3e3822d71ddb2ef
CVE: CVE-2022-41524
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/NR1800X-bof-setParentalRules-0da79b5ce7d44212b275a33b77935a42; https://brief-nymphea-813.notion.site/NR1800X-bof-setParentalRules-0da79b5ce7d44212b275a33b77935a42
CVE: CVE-2022-41525
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://brief-nymphea-813.notion.site/NR1800X-command-injection-setOpModeCfg-7b10868ba53544148d9aa3100b5df5cc; https://brief-nymphea-813.notion.site/NR1800X-command-injection-setOpModeCfg-7b10868ba53544148d9aa3100b5df5cc
CVE: CVE-2022-41526
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter in the setDiagnosisCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/NR1800X-bof-setDiagnosisCfg-fcbc55a98e4b4bfbb94db610e666e834; https://brief-nymphea-813.notion.site/NR1800X-bof-setDiagnosisCfg-fcbc55a98e4b4bfbb94db610e666e834
CVE: CVE-2022-41527
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/NR1800X-bof-setOpModeCfg-2e286823203c405bbdec4305b0924a02; https://brief-nymphea-813.notion.site/NR1800X-bof-setOpModeCfg-2e286823203c405bbdec4305b0924a02
CVE: CVE-2022-41528
Published: 2022-10-06
Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://brief-nymphea-813.notion.site/NR1800X-bof-setSmsCfg-0f2be43baa9842d79ae6bafbded574f8; https://brief-nymphea-813.notion.site/NR1800X-bof-setSmsCfg-0f2be43baa9842d79ae6bafbded574f8
CVE: CVE-2022-27810
Published: 2022-10-06
Description: It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode (when asserts were enabled). This issue affects Hermes versions prior to v0.12.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-674
References: https://www.facebook.com/security/advisories/cve-2022-27810; https://www.facebook.com/security/advisories/cve-2022-27810
CVE: CVE-2022-39279
Published: 2022-10-06
Description: discourse-chat is a plugin for the Discourse message board which adds chat functionality. In versions prior to 0.9 some places render a chat channel's name and description in an unsafe way, allowing staff members to cause an cross site scripting (XSS) attack by inserting unsafe HTML into them. Version 0.9 has addressed this issue. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/discourse/discourse-chat/commit/25737733af48e5b9fa60b0561d7fde14bea13cce; https://github.com/discourse/discourse-chat/security/advisories/GHSA-qp62-8m3c-9jgj; https://github.com/discourse/discourse-chat/commit/25737733af48e5b9fa60b0561d7fde14bea13cce
CVE: CVE-2022-39284
Published: 2022-10-06
Description: CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting `$secure` or `$httponly` value to `true` in `Config\Cookie` is not reflected in `set_cookie()` or `Response::setCookie()`. As a result cookie values are erroneously exposed to scripts. It should be noted that this vulnerability does not affect session cookies. Users are advised to upgrade to v4.2.7 or later. Users unable to upgrade are advised to manually construct their cookies either by setting the options in code or by constructing Cookie objects. Examples of each workaround are available in the linked GHSA.
CVSS Score: 2.6 (LOW)
CWE: CWE-665, CWE-732
References: https://codeigniter4.github.io/userguide/helpers/cookie_helper.html#set_cookie; https://codeigniter4.github.io/userguide/outgoing/response.html#CodeIgniter%5CHTTP%5CResponse::setCookie; https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#restrict_access_to_cookies
CVE: CVE-2022-41355
Published: 2022-10-06
Description: Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leave_system/classes/Master.php?f=delete_department.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Cvedig/Bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-1.md; https://github.com/Cvedig/Bug_report/blob/main/vendors/oretnom23/online-leave-management-system/SQLi-1.md
CVE: CVE-2022-40494
Published: 2022-10-06
Description: NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://blog.carrot2.cn/2022/08/cve-2022-40494.html; https://github.com/1security/Vulnerability/blob/main/web/nps/1.md; https://blog.carrot2.cn/2022/08/cve-2022-40494.html
CVE: CVE-2022-26236
Published: 2022-10-06
Description: The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://pastebin.com/hwrvFix5; https://www.beckmancoulter.com/products/clinical-information-management-tools/remisol-advance; https://pastebin.com/hwrvFix5
CVE: CVE-2022-26238
Published: 2022-10-06
Description: The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://pastebin.com/23N5wcC7; https://www.beckmancoulter.com/products/clinical-information-management-tools/remisol-advance; https://pastebin.com/23N5wcC7