deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2198
Published: 2022-08-22
Description: The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messages, allowing any logged in user to read other users private message using the message id, which can easily be brute forced.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://wpscan.com/vulnerability/867248f2-d497-4ea8-b3f8-0f2e8aaaa2bd; https://wpscan.com/vulnerability/867248f2-d497-4ea8-b3f8-0f2e8aaaa2bd
CVE: CVE-2022-2275
Published: 2022-08-22
Description: The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/07757d1e-39ad-4199-bc7a-ecb821dfc996; https://wpscan.com/vulnerability/07757d1e-39ad-4199-bc7a-ecb821dfc996
CVE: CVE-2022-2276
Published: 2022-08-22
Description: The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow unauthenticated attackers to delete arbitrary posts/pages from the blog
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://plugins.trac.wordpress.org/changeset?new=2749780%40wp-edit-menu%2Ftrunk&old=2220186%40wp-edit-menu%2Ftrunk; https://wpscan.com/vulnerability/92de9c1b-48dd-4a5f-bbb3-455f8f172b09; https://plugins.trac.wordpress.org/changeset?new=2749780%40wp-edit-menu%2Ftrunk&old=2220186%40wp-edit-menu%2Ftrunk
CVE: CVE-2022-2312
Published: 2022-08-22
Description: The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing attackers to make logged in user with a role as low as contributor to add/edit and delete students via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site scripting
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-639, CWE-352
References: https://wpscan.com/vulnerability/7548c1fb-77b5-4290-a297-35820edfe0f8; https://wpscan.com/vulnerability/7548c1fb-77b5-4290-a297-35820edfe0f8
CVE: CVE-2022-2361
Published: 2022-08-22
Description: The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/aa69377d-ba9e-4a2f-921c-be2ab5edcb4e; https://wpscan.com/vulnerability/aa69377d-ba9e-4a2f-921c-be2ab5edcb4e
CVE: CVE-2022-2362
Published: 2022-08-22
Description: The Download Manager WordPress plugin before 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based download blocking restrictions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d94b721e-9ce2-45e5-a673-2a57b0137653; https://wpscan.com/vulnerability/d94b721e-9ce2-45e5-a673-2a57b0137653
CVE: CVE-2022-2375
Published: 2022-08-22
Description: The WP Sticky Button WordPress plugin before 1.4.1 does not have authorisation and CSRF checks when saving its settings, allowing unauthenticated users to update them. Furthermore, due to the lack of escaping in some of them, it could lead to Stored Cross-Site Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/caab1fca-cc6b-45bb-bd0d-f857edd8bb81; https://wpscan.com/vulnerability/caab1fca-cc6b-45bb-bd0d-f857edd8bb81
CVE: CVE-2022-2377
Published: 2022-08-22
Description: The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing any authenticated users to send arbitrary emails on behalf of the blog
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/f4e606e9-0664-42fb-a59b-21de306eb530; https://wpscan.com/vulnerability/f4e606e9-0664-42fb-a59b-21de306eb530
CVE: CVE-2022-2382
Published: 2022-08-22
Description: The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/777d4637-444b-4eda-bc21-95d3a3bf6cd3; https://wpscan.com/vulnerability/777d4637-444b-4eda-bc21-95d3a3bf6cd3
CVE: CVE-2022-2383
Published: 2022-08-22
Description: The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4a3b3023-e740-411c-a77c-6477b80d7531; https://wpscan.com/vulnerability/4a3b3023-e740-411c-a77c-6477b80d7531
CVE: CVE-2022-2388
Published: 2022-08-22
Description: The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/50acd35f-eb31-4aba-bf32-b390e9514beb; https://wpscan.com/vulnerability/50acd35f-eb31-4aba-bf32-b390e9514beb
CVE: CVE-2022-2389
Published: 2022-08-22
Description: The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin before 2.1.2 does not have authorisation and CSRF checks in one of its AJAX action, allowing any authenticated users, such as subscriber to create automations
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/e70f00b7-6251-476e-9297-60af509e6ad9; https://wpscan.com/vulnerability/e70f00b7-6251-476e-9297-60af509e6ad9
CVE: CVE-2022-2392
Published: 2022-08-22
Description: The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552
References: https://wpscan.com/vulnerability/5001ed18-858e-4c9d-9d7b-a1305fcdf61b; https://wpscan.com/vulnerability/5001ed18-858e-4c9d-9d7b-a1305fcdf61b
CVE: CVE-2022-2407
Published: 2022-08-22
Description: The WP phpMyAdmin WordPress plugin before 5.2.0.4 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/5be611e8-5b7a-4579-9757-45a4c94a53ca; https://wpscan.com/vulnerability/5be611e8-5b7a-4579-9757-45a4c94a53ca
CVE: CVE-2022-2532
Published: 2022-08-22
Description: The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/07278b12-58e6-4230-b2fb-19237e9785d8; https://wpscan.com/vulnerability/07278b12-58e6-4230-b2fb-19237e9785d8
CVE: CVE-2022-2544
Published: 2022-08-22
Description: The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php; https://wpscan.com/vulnerability/a9bcc68c-eeda-4647-8463-e7e136733053; https://plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php?old=2126467&old_path=ninja-job-board%2Ftrunk%2Fincludes%2FClasses%2FFile%2FFileHandler.php
CVE: CVE-2022-2551
Published: 2022-08-22
Description: The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site backup without authenticating.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2551; https://wpscan.com/vulnerability/f27d753e-861a-4d8d-9b9a-6c99a8a7ebe0; https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2551
CVE: CVE-2022-2552
Published: 2022-08-22
Description: The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-862
References: https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2552; https://wpscan.com/vulnerability/6b540712-fda5-4be6-ae4b-bd30a9d9d698; https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2552
CVE: CVE-2022-2555
Published: 2022-08-22
Description: The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/7ec9e493-bc48-4a5d-8c7e-34beaba892ae; https://wpscan.com/vulnerability/7ec9e493-bc48-4a5d-8c7e-34beaba892ae
CVE: CVE-2022-2557
Published: 2022-08-22
Description: The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://wpscan.com/vulnerability/c043916a-92c9-4d02-8cca-1a90e5382b7e; https://wpscan.com/vulnerability/c043916a-92c9-4d02-8cca-1a90e5382b7e
CVE: CVE-2022-2558
Published: 2022-08-22
Description: The Simple Job Board WordPress plugin before 2.10.0 is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://wpscan.com/vulnerability/6e096269-eedc-4614-88ce-6795c4adf32f; https://wpscan.com/vulnerability/6e096269-eedc-4614-88ce-6795c4adf32f
CVE: CVE-2022-2593
Published: 2022-08-22
Description: The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/229a065e-1062-44d4-818d-29aa3b6b6d41; https://wpscan.com/vulnerability/229a065e-1062-44d4-818d-29aa3b6b6d41
CVE: CVE-2022-2594
Published: 2022-08-22
Description: The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend form available. This vulnerability was introduced in the 5.0 rewrite and did not exist prior to that release.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://wpscan.com/vulnerability/3fde5336-552c-4861-8b4d-89a16735c0e2; https://www.pritect.net/blog/advanced-custom-fields-5-12-3-can-allow-unauthenticated-users-to-upload-arbitrary-files; https://wpscan.com/vulnerability/3fde5336-552c-4861-8b4d-89a16735c0e2
CVE: CVE-2022-2600
Published: 2022-08-22
Description: The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1022
References: https://wpscan.com/vulnerability/01bbdefd-bdc3-43ef-9f35-6e7ebe786be2; https://wpscan.com/vulnerability/01bbdefd-bdc3-43ef-9f35-6e7ebe786be2
CVE: CVE-2022-2873
Published: 2022-08-22
Description: An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-131, CWE-131
References: https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html; https://lore.kernel.org/lkml/[PII_REDACTED]3451.551672-1-zheyuma97%40gmail.com/T/
CVE: CVE-2022-33900
Published: 2022-08-22
Description: PHP Object Injection vulnerability in Easy Digital Downloads plugin <= 3.0.1 at WordPress.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://patchstack.com/database/vulnerability/easy-digital-downloads/wordpress-easy-digital-downloads-plugin-3-0-1-php-object-injection-vulnerability; https://wordpress.org/plugins/easy-digital-downloads/#developers; https://patchstack.com/database/vulnerability/easy-digital-downloads/wordpress-easy-digital-downloads-plugin-3-0-1-php-object-injection-vulnerability
CVE: CVE-2022-34149
Published: 2022-08-22
Description: Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-287
References: https://lana.codes/lanavdb/6d794d65-d44b-4099-94c5-3dd2995b218c?_s_id=cve; https://patchstack.com/database/vulnerability/miniorange-oauth-20-server/wordpress-wp-oauth-server-plugin-3-0-4-authentication-bypass-vulnerability?_s_id=cve; https://lana.codes/lanavdb/6d794d65-d44b-4099-94c5-3dd2995b218c?_s_id=cve
CVE: CVE-2022-34347
Published: 2022-08-22
Description: Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/download-manager/wordpress-download-manager-plugin-3-2-48-cross-site-request-forgery-csrf-vulnerability; https://wordpress.org/plugins/download-manager/#developers; https://patchstack.com/database/vulnerability/download-manager/wordpress-download-manager-plugin-3-2-48-cross-site-request-forgery-csrf-vulnerability
CVE: CVE-2022-34770
Published: 2022-08-22
Description: Tabit - sensitive information disclosure. Several APIs on the web system display, without authorization, sensitive information such as health statements, previous bills in a specific restaurant, alcohol consumption and smoking habits. Each of the described API’s, has in its URL one or more MongoDB ID which is not so simple to enumerate. However, they each receive a ‘tiny URL’ in Tabit’s domain, in the form of https://tbit.be/{suffix} with suffix being a 5 characters long string containing numbers, lower- and upper-case letters. It is not so simple to enumerate them all, but really easy to find some that work and lead to a personal endpoint. This is both an example of OWASP: API4 - rate limiting and OWASP: API1 - Broken object level authorization. Furthermore, the redirect URL disclosed the MongoDB IDs discussed above, and we could use them to query other endpoints disclosing more personal information. For example: The URL https://tabitisrael.co.il/online-reservations/health-statement?orgId={org_id}&healthStatementId={health_statement_id} is used to invite friends to fill a health statement before attending the restaurant. We can use the health_statement_id to access the https://tgm-api.tabit.cloud/health-statement/{health_statement_id} API which disclose medical information as well as id number.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-639
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-34771
Published: 2022-08-22
Description: Tabit - arbitrary SMS send on Tabits behalf. The resend OTP API of tabit allows an adversary to send messages on tabits behalf to anyone registered on the system - the API receives the parameters: phone number, and CustomMessage, We can use that API to craft malicious messages to any user of the system. In addition, the API probably has some kind of template injection potential. When entering {{OTP}} in the custom message field it is formatted into an OTP.
CVSS Score: 5.5 (MEDIUM)
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-34772
Published: 2022-08-22
Description: Tabit - password enumeration. Description: Tabit - password enumeration. The passwords for the Tabit system is a 4 digit OTP. One can resend OTP and try logging in indefinitely. Once again, this is an example of OWASP: API4 - Rate limiting.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-521
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-34773
Published: 2022-08-22
Description: Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addresses to the DB. This is an example of OWASP:API8 – Injection.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-74
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-34774
Published: 2022-08-22
Description: Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal details, such as email addresses and phone numbers of a specific user in a restaurant's loyalty program. Possibly allowing account takeover (the mail can be used to reset password).
CVSS Score: 6.3 (MEDIUM)
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-34775
Published: 2022-08-22
Description: Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containing the MongoDB ID of the reservation, and organization. This can be used to query the http://tgm-api.tabit.cloud/rsv/management/{reservationId}?organization={orgId} API which returns a lot of data regarding the reservation (OWASP: API3): Name, mail, phone number, the number of visits of the user to this specific restaurant, the money he spent there, the money he spent on alcohol, whether he left a deposit etc. This information can easily be used for a phishing attack.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-639
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-34776
Published: 2022-08-22
Description: Tabit - giftcard stealth. Several APIs on the web system display, without authorization, sensitive information such as health statements, previous bills in a specific restaurant, alcohol consumption and smoking habits. Each of the described APIs, has in its URL one or more MongoDB ID which is not so simple to enumerate. However, they each receive a 'tiny URL' in tabits domain, in the form of https://tbit.be/{suffix} with suffix being a 5 character long string containing numbers, lower and upper case letters. It is not so simple to enumerate them all, but really easy to find some that work and lead to a personal endpoint. Furthermore, the redirect URL disclosed the MongoDB IDs discussed above, and we could use them to query other endpoints disclosing more personal information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2022-34857
Published: 2022-08-22
Description: Reflected Cross-Site Scripting (XSS) vulnerability in smartypants SP Project & Document Manager plugin <= 4.59 at WordPress
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manager-plugin-4-59-reflected-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/sp-client-document-manager/#developers; https://patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manager-plugin-4-59-reflected-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-34858
Published: 2022-08-22
Description: Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin <= 1.11.3 at WordPress.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://lana.codes/lanavdb/df23b19f-4134-41d3-8cb3-9d44189b461b?_s_id=cve; https://patchstack.com/database/vulnerability/oauth-client/wordpress-oauth-2-0-client-for-sso-plugin-1-11-3-authentication-bypass-vulnerability?_s_id=cve; https://lana.codes/lanavdb/df23b19f-4134-41d3-8cb3-9d44189b461b?_s_id=cve
CVE: CVE-2022-35654
Published: 2022-08-22
Description: Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix; https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix
CVE: CVE-2022-35655
Published: 2022-08-22
Description: Pega Platform from 7.3 to 8.7.3 is affected by an XSS issue due to a misconfiguration of a datapage setting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix; https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix
CVE: CVE-2022-35656
Published: 2022-08-22
Description: Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix; https://support.pega.com/support-doc/pega-security-advisory-d22-e22-f22-vulnerabilities-%E2%80%93-hotfix-matrix
CVE: CVE-2022-36346
Published: 2022-08-22
Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/maxbuttons/wordpress-maxbuttons-plugins-9-2-multiple-cross-site-request-forgery-csrf-vulnerabilities; https://wordpress.org/plugins/maxbuttons/#developers; https://patchstack.com/database/vulnerability/maxbuttons/wordpress-maxbuttons-plugins-9-2-multiple-cross-site-request-forgery-csrf-vulnerabilities
CVE: CVE-2022-37133
Published: 2022-08-22
Description: D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/doReboot/readme.md; https://www.dlink.com/en/security-bulletin/; https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/doReboot/readme.md
CVE: CVE-2022-37134
Published: 2022-08-22
Description: D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tp_usrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tp_usrname, resulting in stack overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1284
References: https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/form2Wan_cgi/readme.md; https://www.dlink.com/en/security-bulletin/; https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/form2Wan_cgi/readme.md
CVE: CVE-2020-27834
Published: 2022-08-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.