deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-1014
Published: 2022-05-23
Description: The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/eb9e202d-04aa-4343-86a2-4aa2edaa7f6b; https://wpscan.com/vulnerability/eb9e202d-04aa-4343-86a2-4aa2edaa7f6b
CVE: CVE-2022-1093
Published: 2022-05-23
Description: The WP Meta SEO WordPress plugin before 4.4.7 does not sanitise or escape the breadcrumb separator before outputting it to the page, allowing a high privilege user such as an administrator to inject arbitrary javascript into the page even when unfiltered html is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/57017050-811e-474d-8256-33d19d4c0553; https://wpscan.com/vulnerability/57017050-811e-474d-8256-33d19d4c0553
CVE: CVE-2022-1192
Published: 2022-05-23
Description: The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/18660c71-5a89-4ef6-b0dd-7a166e3449d6; https://wpscan.com/vulnerability/18660c71-5a89-4ef6-b0dd-7a166e3449d6
CVE: CVE-2022-1218
Published: 2022-05-23
Description: The Domain Replace WordPress plugin through 1.3.8 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/fc1e8681-9229-4645-bc22-4897522d0c65; https://wpscan.com/vulnerability/fc1e8681-9229-4645-bc22-4897522d0c65
CVE: CVE-2022-1221
Published: 2022-05-23
Description: The Gwyn's Imagemap Selector WordPress plugin through 0.3.3 does not sanitise and escape some parameters before outputting them back in attributes, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/641be9f6-2f74-4386-b16e-4b9488f0d2a9; https://wpscan.com/vulnerability/641be9f6-2f74-4386-b16e-4b9488f0d2a9
CVE: CVE-2022-1268
Published: 2022-05-23
Description: The Donate Extra WordPress plugin through 2.02 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6d596afb-cac3-4ef2-9742-235c068d1006; https://wpscan.com/vulnerability/6d596afb-cac3-4ef2-9742-235c068d1006
CVE: CVE-2022-1298
Published: 2022-05-23
Description: The Tabs WordPress plugin before 2.2.8 does not sanitise and escape Tab descriptions, which could allow high privileged users with a role as low as editor to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e124d1ab-3e02-4ca5-8218-ce635e8bf074; https://wpscan.com/vulnerability/e124d1ab-3e02-4ca5-8218-ce635e8bf074
CVE: CVE-2022-1320
Published: 2022-05-23
Description: The Sliderby10Web WordPress plugin before 1.2.52 does not properly sanitize and escape some of its settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/43581d6b-333a-48d9-a1ae-b9479da8ff87; https://wpscan.com/vulnerability/43581d6b-333a-48d9-a1ae-b9479da8ff87
CVE: CVE-2022-1547
Published: 2022-05-23
Description: The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/83eca346-7045-414e-81fc-e0d9b735f0bd; https://wpscan.com/vulnerability/83eca346-7045-414e-81fc-e0d9b735f0bd
CVE: CVE-2022-1558
Published: 2022-05-23
Description: The Curtain WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/166839/; https://wpscan.com/vulnerability/0414dad4-e90b-4122-8b77-a8a958ab824d; https://packetstormsecurity.com/files/166839/
CVE: CVE-2021-42585
Published: 2022-05-23
Description: A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/LibreDWG/libredwg/issues/351; https://github.com/LibreDWG/libredwg/issues/351
CVE: CVE-2021-42586
Published: 2022-05-23
Description: A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/LibreDWG/libredwg/issues/350; https://github.com/LibreDWG/libredwg/issues/350
CVE: CVE-2022-1825
Published: 2022-05-23
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository collectiveaccess/providence prior to 1.8.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/collectiveaccess/providence/commit/49de453c8d4942d09fab230e8f242300c831e2a7; https://huntr.dev/bounties/c6ad4cef-1b3d-472f-af0e-68e46341dfe5; https://github.com/collectiveaccess/providence/commit/49de453c8d4942d09fab230e8f242300c831e2a7
CVE: CVE-2022-28874
Published: 2022-05-23
Description: Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: https://www.f-secure.com/en/home/support/security-advisories; https://www.withsecure.com/en/support/security-advisories; https://www.f-secure.com/en/home/support/security-advisories
CVE: CVE-2022-29599
Published: 2022-05-23
Description: In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116, CWE-116
References: http://www.openwall.com/lists/oss-security/2022/05/23/3; https://github.com/apache/maven-shared-utils/pull/40; https://issues.apache.org/jira/browse/MSHARED-297
CVE: CVE-2022-1810
Published: 2022-05-23
Description: Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/publify/publify/commit/c0aba87844d1e47da50c0d99a3465164a4d244ce; https://huntr.dev/bounties/9b2d7579-032e-42da-b736-4b10a868eacb; https://github.com/publify/publify/commit/c0aba87844d1e47da50c0d99a3465164a4d244ce
CVE: CVE-2022-1816
Published: 2022-05-23
Description: A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/view_accounts?type=zookeeper of the content module. The manipulation of the argument admin_name with the input <script>alert(1)</script> leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Zoo-Management-System/Zoo-Management-System%28XSS%29.md; https://vuldb.com/?id.200558; https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Zoo-Management-System/Zoo-Management-System%28XSS%29.md
CVE: CVE-2022-1817
Published: 2022-05-23
Description: A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input </td><img src="" onerror="alert(1)"><td>1 leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Badminton%20Center%20Management%20System%28XSS%29.md; https://vuldb.com/?id.200559; https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Badminton%20Center%20Management%20System%28XSS%29.md
CVE: CVE-2022-0900
Published: 2022-05-23
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NetDataSoft DivvyDrive allows Stored XSS.This issue affects DivvyDrive: from unspecified before v.4.6.2.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.usom.gov.tr/bildirim/tr-22-0375; https://www.usom.gov.tr/bildirim/tr-22-0375
CVE: CVE-2022-28997
Published: 2022-05-23
Description: CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://i.imgur.com/BwWTfYU.png; https://i.imgur.com/S1F7MaJ.png; https://i.imgur.com/pzWjkXI.png
CVE: CVE-2022-28998
Published: 2022-05-23
Description: Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive information via crafted code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://i.imgur.com/aw6hZo2.png; https://i.imgur.com/jMURHQF.png; https://packetstormsecurity.com/files/166381/Xlight-FTP-3.9.3.2-Buffer-Overflow.html
CVE: CVE-2021-41714
Published: 2022-05-23
Description: In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user can download arbitrary files on the Tipask server such as .env, /etc/passwd, laravel.log, causing infomation leakage.
CVSS Score: 7.7 (HIGH)
CWE: CWE-494
References: https://github.com/sdfsky/tipask/blob/c4e6aa9f6017c[PII_REDACTED]016954c0922d203b7/app/Http/Controllers/AttachController.php#L42; https://github.com/sdfsky/tipask/commit/9b5f13d1708e9a5dc0959cb8a97be1c32b94ca69; https://www.yuque.com/henry-weply/penetration/fza5hm
CVE: CVE-2022-1811
Published: 2022-05-23
Description: Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://github.com/publify/publify/commit/0fb6b027fbaf17f6a6551f2148482a03eac12927; https://huntr.dev/bounties/4d97f665-c9f1-4c38-b774-692255a7c44c; https://github.com/publify/publify/commit/0fb6b027fbaf17f6a6551f2148482a03eac12927
CVE: CVE-2022-28932
Published: 2022-05-23
Description: D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: http://d-link.com; http://dsl-g2452dg.com; https://github.com/[PII_REDACTED]/iot/blob/main/dsl
CVE: CVE-2022-29004
Published: 2022-05-23
Description: Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://phpgurukul.com; https://github.com/sudoninja-noob/CVE-2022-29004/blob/main/CVE-2022-29004.txt; https://phpgurukul.com/e-diary-management-system-using-php-and-mysql/
CVE: CVE-2022-29005
Published: 2022-05-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://online.com; https://github.com/sudoninja-noob/CVE-2022-29005/blob/main/CVE-2022-29005.txt; https://phpgurukul.com/online-birth-certificate-system-using-php-and-mysql/
CVE: CVE-2022-30014
Published: 2022-05-23
Description: Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://lumidek.com; http://simple.com; https://github.com/offsecin/bugsdisclose/blob/main/csrf
CVE: CVE-2022-30016
Published: 2022-05-23
Description: Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/offsecin/bugsdisclose/blob/main/access-control; https://www.sourcecodester.com/php/15296/rescue-dispatch-management-system-phpoop-free-source-code.html; https://github.com/offsecin/bugsdisclose/blob/main/access-control
CVE: CVE-2022-30017
Published: 2022-05-23
Description: Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/offsecin/bugsdisclose/blob/main/stored-xss; https://www.sourcecodester.com/php/15296/rescue-dispatch-management-system-phpoop-free-source-code.html; https://github.com/offsecin/bugsdisclose/blob/main/stored-xss
CVE: CVE-2022-28944
Published: 2022-05-23
Description: Certain EMCO Software products are affected by: CWE-494: Download of Code Without Integrity Check. This affects MSI Package Builder for Windows 9.1.4 and Remote Installer for Windows 6.0.13 and Ping Monitor for Windows 8.0.18 and Remote Shutdown for Windows 7.2.2 and WakeOnLan 2.0.8 and Network Inventory for Windows 5.8.22 and Network Software Scanner for Windows 2.0.8 and UnLock IT for Windows 6.1.1. The impact is: execute arbitrary code (remote). The component is: Updater. The attack vector is: To exploit this vulnerability, a user must trigger an update of an affected installation of EMCO Software. ¶¶ Multiple products from EMCO Software are affected by a remote code execution vulnerability during the update process.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494
References: http://emco.com; http://msi.com; https://github.com/gerr-re/cve-2022-28944/blob/main/cve-2022-28944_public-advisory.pdf
CVE: CVE-2021-32935
Published: 2022-05-23
Description: The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-224-01; https://www.cisa.gov/uscert/ics/advisories/icsa-21-224-01
CVE: CVE-2021-32941
Published: 2022-05-23
Description: Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-02; https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-02
CVE: CVE-2021-42233
Published: 2022-05-23
Description: The Simple Blog plugin in Wondercms 3.4.1 is vulnerable to stored cross-site scripting (XSS) vulnerability. When any user opens a particular blog hosted on an attackers' site, XSS may occur.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://hackerone.com/reports/485748; https://hackerone.com/reports/647130; https://hackerone.com/reports/961046
CVE: CVE-2022-31466
Published: 2022-05-23
Description: Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink.
CVSS Score: 7.9 (HIGH)
CWE: CWE-59, CWE-367
References: https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/; https://softwaresec001.wordpress.com/2022/05/13/privilege-escalation-vulnerability-in-quick-heal-total-security/
CVE: CVE-2022-31467
Published: 2022-05-23
Description: A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature of the DLLs it tries to load.
CVSS Score: 7.9 (HIGH)
CWE: CWE-427
References: https://softwaresec001.wordpress.com/2022/05/13/dll-hijack-vulnerability-fixed-in-quick-heal-total-security/; https://softwaresec001.wordpress.com/2022/05/13/dll-hijack-vulnerability-fixed-in-quick-heal-total-security/
CVE: CVE-2021-32958
Published: 2022-05-23
Description: Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-288
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-180-06; https://www.cisa.gov/uscert/ics/advisories/icsa-21-180-06
CVE: CVE-2022-1467
Published: 2022-05-23
Description: Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.
CVSS Score: 7.4 (HIGH)
CWE: CWE-668
References: https://www.aveva.com/en/support-and-success/cyber-security-updates/; https://www.cisa.gov/uscert/ics/advisories/icsa-22-130-05; https://www.aveva.com/en/support-and-success/cyber-security-updates/
CVE: CVE-2022-31487
Published: 2022-05-23
Description: Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md; https://github.com/bigb0x/CVEs/blob/main/Inout-Blockchain-FiatExchanger-221-sqli.md; https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md
CVE: CVE-2022-31488
Published: 2022-05-23
Description: Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md; https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md
CVE: CVE-2022-31489
Published: 2022-05-23
Description: Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md; https://github.com/bigb0x/CVEs/blob/main/Blockchain-AltExchanger-121-sqli.md
CVE: CVE-2022-28999
Published: 2022-05-23
Description: Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://github.com/ycdxsb/Vuln/blob/main/Dev-Cpp-BloodShed-Incorrect-Install-Permission; https://github.com/ycdxsb/Vuln/blob/main/Dev-Cpp-BloodShed-Incorrect-Install-Permission
CVE: CVE-2022-29002
Published: 2022-05-23
Description: A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/xuxueli/xxl-job/issues/2821; https://github.com/xuxueli/xxl-job/issues/2821
CVE: CVE-2022-29376
Published: 2022-05-23
Description: Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://github.com/ycdxsb/Vuln/blob/main/CVE-2022-29376/CVE-2022-29376.md; https://github.com/ycdxsb/Vuln/blob/main/Xampp-Install-Dir-Incorrect-Default-Permission/Xampp-Install-Dir-Incorrect-Default-Permission.md; https://github.com/ycdxsb/Vuln/blob/main/Xampp-Install-Dir-Incorrect-Default-Permission/Xampp-Install-Dir-Incorrect-Default-Permission.md
CVE: CVE-2022-30015
Published: 2022-05-23
Description: In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/all_users.php like Full Username, etc .This causes stored xss.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/offsecin/bugsdisclose/blob/main/xss; https://www.sourcecodester.com/php/12510/simple-food-website-php.html; https://github.com/offsecin/bugsdisclose/blob/main/xss
CVE: CVE-2022-29377
Published: 2022-05-24
Description: Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the parameter CONTENT_LENGTH.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/molezsbd/iot-cve/tree/master/totolink/a3600r; https://github.com/molezsbd/iot-cve/tree/master/totolink/a3600r
CVE: CVE-2022-0734
Published: 2022-05-24
Description: A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.35 through 5.20, and VPN series firmware versions 4.35 through 5.20, that could allow an attacker to obtain some information stored in the user's browser, such as cookies or session tokens, via a malicious script.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml; https://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml
CVE: CVE-2022-0910
Published: 2022-05-24
Description: A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, and VPN series firmware versions 4.32 through 5.21, that could allow an authenticated attacker to bypass the second authentication phase to connect the IPsec VPN server even though the two-factor authentication (2FA) was enabled.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml; https://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml
CVE: CVE-2022-29305
Published: 2022-05-24
Description: imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/helloxz/imgurl/issues/75; https://github.com/helloxz/imgurl/issues/75
CVE: CVE-2022-29309
Published: 2022-05-24
Description: mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/wangl1989/mysiteforme/issues/43; https://github.com/wangl1989/mysiteforme/issues/43