deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30240
Published: 2022-05-09
Description: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift JDBC Driver 1.2.40 through 1.2.55 may allow a local user to execute code. NOTE: this is different from CVE-2022-29972.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88
References: https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/; https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/; https://www.magnitude.com/products/data-connectivity
CVE: CVE-2022-30524
Published: 2022-05-09
Description: There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by (for example) sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=42261; https://forum.xpdfreader.com/viewtopic.php?f=3&t=42261
CVE: CVE-2022-29868
Published: 2022-05-09
Description: 1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used for signing in to 1Password.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://support.1password.com/kb/202204/; https://support.1password.com/kb/202204/
CVE: CVE-2022-30335
Published: 2022-05-09
Description: Bonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/aliceicl/b2f25f3a0a3ba9973e4977f922d04008; https://incognitolab.com; https://www.wealth.co.th/products/bonanza-wealth-management/
CVE: CVE-2021-43712
Published: 2022-05-09
Description: Stored XSS in Add New Employee Form in Sourcecodester Employee Daily Task Management System 1.0 Allows Remote Attacker to Inject/Store Arbitrary Code via the Name Field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://employee.com; http://sourcecodester.com; https://patelvarshil.medium.com/cve-2021-43712-stored-xss-how-i-got-my-first-cve[PII_REDACTED]d4
CVE: CVE-2022-23704
Published: 2022-05-09
Description: A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerability is resolved in Integrated Lights-Out 4 (iLO 4) 2.80 and later.
CVSS Score: 7.5 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04240en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04240en_us
CVE: CVE-2022-23705
Published: 2022-05-09
Description: A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays which could potentially allow the upload, but not execution, of unauthorized update binaries to the array. HPE has made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or later, 5.2.1.0 or later, 6.0.0.100 or later.
CVSS Score: 7.5 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04273en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04273en_us
CVE: CVE-2021-41545
Published: 2022-05-10
Description: A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). When the controller receives a specific BACnet protocol packet, an exception causes the BACnet communication function to go into a “out of work” state and could result in the controller going into a “factory reset” state.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://cert-portal.siemens.com/productcert/pdf/ssa-662649.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-662649.pdf
CVE: CVE-2021-42581
Published: 2022-05-10
Description: Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property "__proto__") as an argument to the function. NOTE: the vendor disputes this because the observed behavior only means that a user can create objects that the user didn't know would contain custom prototypes
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1321
References: https://github.com/ramda/ramda/pull/3192; https://jsfiddle.net/3pomzw5g/2/; https://github.com/ramda/ramda/pull/3192
CVE: CVE-2022-24039
Published: 2022-05-10
Description: A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The “addCell” JavaScript function fails to properly sanitize user-controllable input before including it into the generated XML body of the XLS report document, such that it is possible to inject arbitrary content (e.g., XML tags) into the generated file. An attacker with restricted privileges, by poisoning any of the content used to generate XLS reports, could be able to leverage the application to deliver malicious files against higher-privileged users and obtain Remote Code Execution (RCE) against the administrator’s workstation.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-75
References: https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf
CVE: CVE-2022-24040
Published: 2022-05-10
Description: A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application fails to enforce an upper bound to the cost factor of the PBKDF2 derived key during the creation or update of an account. An attacker with the user profile access privilege could cause a denial of service (DoS) condition through CPU consumption by setting a PBKDF2 derived key with a remarkably high cost effort and then attempting a login to the so-modified account.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf
CVE: CVE-2022-24041
Published: 2022-05-10
Description: A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application stores the PBKDF2 derived key of users passwords with a low iteration count. An attacker with user profile access privilege can retrieve the stored password hashes of other accounts and then successfully perform an offline cracking attack and recover the plaintext passwords of other users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-916, CWE-916
References: https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf
CVE: CVE-2022-24042
Published: 2022-05-10
Description: A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application returns an AuthToken that does not expire at the defined auto logoff delay timeout. An attacker could be able to capture this token and re-use old session credentials or session IDs for authorization.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-613, CWE-613
References: https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf
CVE: CVE-2021-42645
Published: 2022-05-10
Description: CMSimple_XH 1.7.4 is affected by a remote code execution (RCE) vulnerability. To exploit this vulnerability, an attacker must use the "File" parameter to upload a PHP payload to get a reverse shell from the vulnerable host.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://github.com/Net-hunter121/CMSimple_XH-Unauth-RCE; https://github.com/cmsimple-xh/cmsimple-xh/releases/tag/1.7.5; https://github.com/Net-hunter121/CMSimple_XH-Unauth-RCE
CVE: CVE-2021-43094
Published: 2022-05-10
Description: An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://issues.openmrs.org/browse/TRUNK-6043; https://openmrs.org/demo/; https://wiki.openmrs.org/display/docs/Reporting+Bugs
CVE: CVE-2022-28110
Published: 2022-05-10
Description: Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://medium.com/%40honeyakshat999/hotel-management-system-sql-injection-on-login-page-a1ca87a31176; https://owasp.org/www-community/attacks/SQL_Injection; https://medium.com/%40honeyakshat999/hotel-management-system-sql-injection-on-login-page-a1ca87a31176
CVE: CVE-2022-29591
Published: 2022-05-10
Description: Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/H4niz/Vulnerability/blob/main/Tenda-TX9-V22.03.02.10-19042022; https://github.com/H4niz/Vulnerability/blob/main/Tenda-TX9-V22.03.02.10-19042022
CVE: CVE-2022-1397
Published: 2022-05-10
Description: API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://github.com/alextselegidis/easyappointments/commit/63dbb51decfcc1631c398ecd6d30e3a337845526; https://huntr.dev/bounties/5f69e094-ab8c-47a3-b01d-8c12a3b14c61; https://github.com/alextselegidis/easyappointments/commit/63dbb51decfcc1631c398ecd6d30e3a337845526
CVE: CVE-2022-1537
Published: 2022-05-10
Description: file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user's .bashrc file or replace /etc/shadow file if the GruntJS user is root.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: https://github.com/gruntjs/grunt/commit/58016ffac5ed9338b63ecc2a63710f5027362bae; https://huntr.dev/bounties/0179c3e5-bc02-4fc9-8491-a1a319b51b4d; https://lists.debian.org/debian-lts-announce/2023/04/msg00006.html
CVE: CVE-2022-1621
Published: 2022-05-10
Description: Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/7c824682d2028432ee082703ef0ab399867a089b
CVE: CVE-2022-1629
Published: 2022-05-10
Description: Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
CVSS Score: 7.8 (HIGH)
CWE: CWE-126, CWE-125
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/53a70289c2712808e6d4e88927e03cac01b470dd
CVE: CVE-2022-28895
Published: 2022-05-10
Description: A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/1; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/1
CVE: CVE-2022-28896
Published: 2022-05-10
Description: A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/2; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/2
CVE: CVE-2022-28901
Published: 2022-05-10
Description: A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/3; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-882/3
CVE: CVE-2022-28905
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/1; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/1
CVE: CVE-2022-28906
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/2; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/2
CVE: CVE-2022-28907
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hosttime function in /setting/NTPSyncWithHost.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/5; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/5
CVE: CVE-2022-28908
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the ipdoamin parameter in /setting/setDiagnosisCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/4; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/4
CVE: CVE-2022-28909
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/3; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/3
CVE: CVE-2022-28910
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/9; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/9
CVE: CVE-2022-28911
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/CloudACMunualUpdate.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/7; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/7
CVE: CVE-2022-28912
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/8; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/8
CVE: CVE-2022-28913
Published: 2022-05-10
Description: TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/10; https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/N600R/10
CVE: CVE-2022-28915
Published: 2022-05-10
Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/1; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/1
CVE: CVE-2022-29321
Published: 2022-05-10
Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/4; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/4
CVE: CVE-2022-29322
Published: 2022-05-10
Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/5; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/5
CVE: CVE-2022-29323
Published: 2022-05-10
Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/3; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/3
CVE: CVE-2022-29324
Published: 2022-05-10
Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/6; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/6
CVE: CVE-2022-29325
Published: 2022-05-10
Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/8; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/8
CVE: CVE-2022-29326
Published: 2022-05-10
Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/7; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/7
CVE: CVE-2022-29327
Published: 2022-05-10
Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/9; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/9
CVE: CVE-2022-29328
Published: 2022-05-10
Description: D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dap-1330/1; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dap-1330/1
CVE: CVE-2022-29329
Published: 2022-05-10
Description: D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dap-1330/2; https://www.dlink.com/en/security-bulletin/; https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dap-1330/2
CVE: CVE-2022-26987
Published: 2022-05-10
Description: TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://tp-link.com; https://drive.google.com/file/d/1SnNoqRlJiBD673UROLwdgg_roMOneVR9/view?usp=sharing; https://github.com/GANGE666
CVE: CVE-2022-26988
Published: 2022-05-10
Description: TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users could get remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://tp-link.com; https://drive.google.com/file/d/1J1KzojrMCq-MrV0HqkWiu17MIXGhRuUH/view?usp=sharing; https://github.com/GANGE666
CVE: CVE-2021-39024
Published: 2022-05-10
Description: IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213862.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213862; https://www.ibm.com/support/pages/node/6584143; https://exchange.xforce.ibmcloud.com/vulnerabilities/213862
CVE: CVE-2022-22454
Published: 2022-05-10
Description: IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/224987; https://www.ibm.com/support/pages/node/6584175; https://exchange.xforce.ibmcloud.com/vulnerabilities/224987
CVE: CVE-2022-1649
Published: 2022-05-10
Description: Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/476.html).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/radareorg/radare2/commit/a5aafb99c3965259c84ddcf45a91144bf7eb4cf1; https://huntr.dev/bounties/c07e4918-cf86-4d2e-8969-5fb63575b449; https://github.com/radareorg/radare2/commit/a5aafb99c3965259c84ddcf45a91144bf7eb4cf1