deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-45072
Published: 2022-11-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/sitepress-multilingual-cms/wordpress-wpml-multilingual-cms-premium-plugin-4-5-13-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/sitepress-multilingual-cms/wordpress-wpml-multilingual-cms-premium-plugin-4-5-13-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve
CVE: CVE-2021-36905
Published: 2022-11-17
Description: Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve; https://wordpress.org/plugins/quiz-master-next/#developers; https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve
CVE: CVE-2022-20427
Published: 2022-11-17
Description: In (TBD) of (TBD), there is a possible way to corrupt memory due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239555070References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-11-01; https://source.android.com/security/bulletin/pixel/2022-11-01
CVE: CVE-2022-20428
Published: 2022-11-17
Description: In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239555411References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-11-01; https://source.android.com/security/bulletin/pixel/2022-11-01
CVE: CVE-2022-20459
Published: 2022-11-17
Description: In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239556260References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-11-01; https://source.android.com/security/bulletin/pixel/2022-11-01
CVE: CVE-2022-20460
Published: 2022-11-17
Description: In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239557547References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-11-01; https://source.android.com/security/bulletin/pixel/2022-11-01
CVE: CVE-2022-23748
Published: 2022-11-17
Description: mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-114, CWE-426
References: https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C; https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748; https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C
CVE: CVE-2022-28766
Published: 2022-11-17
Description: Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.
CVSS Score: 3.3 (LOW)
CWE: CWE-94, CWE-427
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-28768
Published: 2022-11-17
Description: The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-689, CWE-362
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-36357
Published: 2022-11-17
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Webpsilon ULTIMATE TABLES plugin <= 1.6.5 versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/ultimate-tables/wordpress-ultimate-tables-plugin-1-6-5-unauth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ultimate-tables/wordpress-ultimate-tables-plugin-1-6-5-unauth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-36784
Published: 2022-11-17
Description: 
Elsight – Elsight Halo  Remote Code Execution (RCE)
Elsight Halo web panel allows us to perform connection validation.
through the POST request :
/api/v1/nics/wifi/wlan0/ping
we can abuse DESTINATION parameter and leverage it to remote code execution.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-36785
Published: 2022-11-17
Description: 
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.
*Information Disclosure – 
file contains a URL with private IP at line 15 "login.asp" A. The
window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ;
"admin" – contains default username value "login.asp" B. While accessing the web interface, the login form at 

*Authorization Bypass – 
URL by "setupWizard.asp' while it blocks direct access to – the web interface does not properly validate user identity variables values located at the client side, it is available to access it without a "login_glag" and "login_status" checking browser and to read the admin user credentials for the web interface.




CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-863
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-36786
Published: 2022-11-17
Description: DLINK - DSL-224 Post-auth RCE.
DLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API.
It is possible to inject a command through this interface that will run with ROOT permissions on the router.


CVSS Score: 9.9 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-36787
Published: 2022-11-17
Description: 
webvendome - webvendome SQL Injection.
SQL Injection in the Parameter " DocNumber"
Request :
Get Request :
/webvendome/showfiles.aspx?jobnumber=nullDoc Number=HERE.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-36924
Published: 2022-11-17
Description: The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-38165
Published: 2022-11-17
Description: Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitrary locations on the F-Secure Policy Manager Server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.withsecure.com/en/support/security-advisories/cve-2022-38165; https://www.withsecure.com/en/support/security-advisories/cve-2022-38165
CVE: CVE-2022-39178
Published: 2022-11-17
Description: 
Webvendome - webvendome Internal Server IP Disclosure.
Send GET Request to the request which is shown in the picture.
Internal Server IP and Full path disclosure. 


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-39179
Published: 2022-11-17
Description: 
College Management System v1.0 - Authenticated remote code execution.
An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload
.php file that contains malicious code via student.php file.


CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-39180
Published: 2022-11-17
Description: 
College Management System v1.0 - SQL Injection (SQLi).
By inserting SQL commands to the username and password fields in the login.php page


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-39181
Published: 2022-11-17
Description: 
GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS).
Type 1: Reflected XSS (or Non-Persistent) - The server reads data directly from the HTTP request and reflects it back in
the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content to a
vulnerable web application, which is then reflected back to the victim and executed by the web browser. The most
common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or emailed directly to the victim. URLs constructed in this manner constitute the core of many phishing schemes, whereby
an attacker convinces a victim to visit a URL that refers to a vulnerable site. After the site reflects the attacker's content
back to the victim, the content is executed by the victim's browser. 


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2022-40192
Published: 2022-11-17
Description: Cross-Site Request Forgery (CSRF) vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2022-40200
Published: 2022-11-17
Description: Auth. (subscriber+) Arbitrary File Upload vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-arbitrary-file-upload-vulnerability?_s_id=cve; https://wordpress.org/plugins/wpforo/#developers; https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2022-40694
Published: 2022-11-17
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in News Announcement Scroll plugin <= 8.8.8 on WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/news-announcement-scroll/wordpress-news-announcement-scroll-plugin-8-8-8-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/news-announcement-scroll/wordpress-news-announcement-scroll-plugin-8-8-8-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-41132
Published: 2022-11-17
Description: Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability in Ezoic plugin <= 2.8.8 on WordPress.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-264, CWE-79
References: https://patchstack.com/database/vulnerability/ezoic-integration/wordpress-ezoic-plugin-2-8-8-unauthenticated-plugin-settings-change-leading-to-stored-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ezoic-integration/wordpress-ezoic-plugin-2-8-8-unauthenticated-plugin-settings-change-leading-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2022-41315
Published: 2022-11-17
Description: Auth. Stored Cross-Site Scripting (XSS) vulnerability in Ezoic plugin <= 2.8.8 on WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/ezoic-integration/wordpress-ezoic-plugin-2-8-8-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ezoic-integration/wordpress-ezoic-plugin-2-8-8-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-41775
Published: 2022-11-17
Description: SQL Injection in 







Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-41791
Published: 2022-11-17
Description: Auth. (subscriber+) CSV Injection vulnerability in ProfileGrid plugin <= 5.1.6 on WordPress.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1236, CWE-1236
References: https://patchstack.com/database/vulnerability/profilegrid-user-profiles-groups-and-communities/wordpress-profilegrid-plugin-5-1-6-csv-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/profilegrid-user-profiles-groups-and-communities/wordpress-profilegrid-plugin-5-1-6-csv-injection-vulnerability?_s_id=cve
CVE: CVE-2022-42533
Published: 2022-11-17
Description: In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239415718References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://source.android.com/security/bulletin/pixel/2022-11-01; https://source.android.com/security/bulletin/pixel/2022-11-01
CVE: CVE-2022-43096
Published: 2022-11-17
Description: Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1191
References: https://documentation.media5corp.com/display/MP/DGW+Security+Improvement+Notes+v48.5.2718; https://github.com/ProxyStaffy/Mediatrix-CVE-2022-43096; https://documentation.media5corp.com/display/MP/DGW+Security+Improvement+Notes+v48.5.2718
CVE: CVE-2022-43171
Published: 2022-11-17
Description: A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-122
References: https://github.com/lief-project/LIEF/issues/782; https://github.com/lief-project/LIEF/issues/782
CVE: CVE-2022-43332
Published: 2022-11-17
Description: A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration Panel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/maikroservice/CVE-2022-43332; https://github.com/maikroservice/CVE-2022-43332
CVE: CVE-2022-43447
Published: 2022-11-17
Description: SQL Injection in 









AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-43452
Published: 2022-11-17
Description: SQL Injection in 













FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-43457
Published: 2022-11-17
Description: SQL Injection in 











HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-43506
Published: 2022-11-17
Description: SQL Injection in 



HandlerTag_KID.ashx



in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06; https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE: CVE-2022-44577
Published: 2022-11-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-44591
Published: 2022-11-17
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anthologize plugin <= 0.8.0 on WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/anthologize/wordpress-anthologize-plugin-0-8-0-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/anthologize/wordpress-anthologize-plugin-0-8-0-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-44736
Published: 2022-11-17
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Chameleon plugin <= 1.4.3 on WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/chameleon/wordpress-chameleon-plugin-1-4-3-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/chameleon/wordpress-chameleon-plugin-1-4-3-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-45066
Published: 2022-11-17
Description: Auth. (subscriber+) Broken Access Control vulnerability in WooSwipe WooCommerce Gallery plugin <= 2.0.1 on WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: https://patchstack.com/database/vulnerability/wooswipe/wordpress-wooswipe-woocommerce-gallery-plugin-2-0-1-auth-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wooswipe/wordpress-wooswipe-woocommerce-gallery-plugin-2-0-1-auth-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2022-45069
Published: 2022-11-17
Description: Auth. (contributor+) Privilege Escalation vulnerability in Crowdsignal Dashboard plugin <= 3.0.9 on WordPress.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-264
References: https://patchstack.com/database/vulnerability/polldaddy/wordpress-crowdsignal-dashboard-plugin-3-0-9-privilege-escalation-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/polldaddy/wordpress-crowdsignal-dashboard-plugin-3-0-9-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2022-45077
Published: 2022-11-17
Description: Auth. (subscriber+) PHP Object Injection vulnerability in Betheme theme <= 26.5.1.4 on WordPress.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-5-1-4-auth-php-object-injection-vulnerability?_s_id=cve; https://themeforest.net/item/betheme-responsive-multipurpose-wordpress-theme/7758048; https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-5-1-4-auth-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2022-45375
Published: 2022-11-17
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in iFeature Slider plugin <= 1.2 on WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/ifeature-slider/wordpress-ifeature-slider-plugin-1-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ifeature-slider/wordpress-ifeature-slider-plugin-1-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-24939
Published: 2022-11-18
Description: 
 A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.


CVSS Score: 5.7 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://github.com/SiliconLabs/gecko_sdk; https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/0698Y00000IWDCwQAP?operationContext=S1; https://github.com/SiliconLabs/gecko_sdk
CVE: CVE-2022-43308
Published: 2022-11-18
Description: INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://github.com/vitorespf/Advisories/blob/master/Intelbras-switch.txt; https://www.intelbras.com/pt-br/switch-gerenciavel-24-portas-poe-gigabit-ethernet-sg-2404-poe; https://github.com/vitorespf/Advisories/blob/master/Intelbras-switch.txt
CVE: CVE-2022-24037
Published: 2022-11-18
Description: Karmasis Informatics Infraskope SIEM+

 has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://karmasis.com/urunlerimiz/infraskope-siem/; https://www.usom.gov.tr/bildirim/tr-22-0691; https://karmasis.com/urunlerimiz/infraskope-siem/
CVE: CVE-2022-24038
Published: 2022-11-18
Description: Karmasis Informatics Infraskope SIEM+

has an unauthenticated access vulnerability which could allow an unauthenticated attacker to damage the page where the agents are listed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://karmasis.com/urunlerimiz/infraskope-siem/; https://www.usom.gov.tr/bildirim/tr-22-0691; https://karmasis.com/urunlerimiz/infraskope-siem/
CVE: CVE-2022-45471
Published: 2022-11-18
Description: In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email address
CVSS Score: 3.5 (LOW)
CWE: CWE-770, CWE-770
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-44204
Published: 2022-11-18
Description: D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/flamingo1616/iot_vuln/blob/main/D-Link/DIR-3060/5.md; https://www.dlink.com/en/security-bulletin/; https://github.com/flamingo1616/iot_vuln/blob/main/D-Link/DIR-3060/5.md