deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-22246
Published: 2022-10-18
Description: A PHP Local File Inclusion (LFI) vulnerability in the J-Web component of Juniper Networks Junos OS may allow a low-privileged authenticated attacker to execute an untrusted PHP file. By chaining this vulnerability with other unspecified vulnerabilities, and by circumventing existing attack requirements, successful exploitation could lead to a complete system compromise. This issue affects Juniper Networks Junos OS: all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S2; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R2-S2, 21.3R3; 21.4 versions prior to 21.4R1-S2, 21.4R2-S1, 21.4R3; 22.1 versions prior to 22.1R1-S1, 22.1R2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-829, CWE-829
References: https://kb.juniper.net/JSA69899; https://kb.juniper.net/JSA69899
CVE: CVE-2022-22247
Published: 2022-10-18
Description: An Improper Input Validation vulnerability in ingress TCP segment processing of Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker to send a crafted TCP segment to the device, triggering a kernel panic, leading to a Denial of Service (DoS) condition. Continued receipt and processing of this TCP segment could create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS Evolved: 21.3 versions prior to 21.3R3-EVO; 21.4 versions prior to 21.4R2-EVO; 22.1 versions prior to 22.1R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 21.3R1-EVO.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://kb.juniper.net/JSA69904; https://kb.juniper.net/JSA69904
CVE: CVE-2022-22248
Published: 2022-10-18
Description: An Incorrect Permission Assignment vulnerability in shell processing of Juniper Networks Junos OS Evolved allows a low-privileged local user to modify the contents of a configuration file which could cause another user to execute arbitrary commands within the context of the follow-on user's session. If the follow-on user is a high-privileged administrator, the attacker could leverage this vulnerability to take complete control of the target system. While this issue is triggered by a user, other than the attacker, accessing the Junos shell, an attacker simply requires Junos CLI access to exploit this vulnerability. This issue affects Juniper Networks Junos OS Evolved: 20.4-EVO versions prior to 20.4R3-S1-EVO; All versions of 21.1-EVO; 21.2-EVO versions prior to 21.2R3-EVO; 21.3-EVO versions prior to 21.3R2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 19.2R1-EVO.
CVSS Score: 7.3 (HIGH)
CWE: CWE-732, CWE-732
References: https://kb.juniper.net/JSA69905; https://kb.juniper.net/JSA69905
CVE: CVE-2022-22249
Published: 2022-10-18
Description: An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). When there is a continuous mac move a memory corruption causes one or more FPCs to crash and reboot. These MAC moves can be between two local interfaces or between core/EVPN and local interface. The below error logs can be seen in PFE syslog when this issue happens: xss_event_handler(1071): EA[0:0]_PPE 46.xss[0] ADDR Error. ppe_error_interrupt(4298): EA[0:0]_PPE 46 Errors sync xtxn error xss_event_handler(1071): EA[0:0]_PPE 1.xss[0] ADDR Error. ppe_error_interrupt(4298): EA[0:0]_PPE 1 Errors sync xtxn error xss_event_handler(1071): EA[0:0]_PPE 2.xss[0] ADDR Error. This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 15.1R7-S13; 19.1 versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-664
References: https://kb.juniper.net/JSA69906; https://kb.juniper.net/JSA69906
CVE: CVE-2022-22250
Published: 2022-10-18
Description: An Improper Control of a Resource Through its Lifetime vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows unauthenticated adjacent attacker to cause a Denial of Service (DoS). In an EVPN-MPLS scenario, if MAC is learned locally on an access interface but later a request to delete is received indicating that the MAC was learnt remotely, this can lead to memory corruption which can result in line card crash and reload. This issue affects: Juniper Networks Junos OS All versions 17.3R1 and later versions prior to 19.2R3-S5; 19.3 versions prior to 19.3R3-S5; 19.4 versions prior to 19.4R2-S6, 19.4R3-S8; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S4; 20.3 versions prior to 20.3R3-S3; 20.4 versions prior to 20.4R3-S3; 21.1 versions prior to 21.1R3-S1; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2; 21.4 versions prior to 21.4R1-S1, 21.4R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S3-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO versions prior to 21.2R3-EVO; 21.3-EVO versions prior to 21.3R2-EVO; 21.4-EVO versions prior to 21.4R1-S1-EVO, 21.4R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 17.3R1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-664
References: https://kb.juniper.net/JSA69907; https://kb.juniper.net/JSA69907
CVE: CVE-2022-22251
Published: 2022-10-18
Description: On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.
CVSS Score: 7.8 (HIGH)
CWE: CWE-257, CWE-275, CWE-522
References: https://kb.juniper.net/JSA69908; https://kb.juniper.net/JSA69908
CVE: CVE-2022-39055
Published: 2022-10-18
Description: RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.twcert.org.tw/tw/cp-132-6616-9092f-1.html; https://www.twcert.org.tw/tw/cp-132-6616-9092f-1.html
CVE: CVE-2022-39056
Published: 2022-10-18
Description: RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.twcert.org.tw/tw/cp-132-6617-109b0-1.html; https://www.twcert.org.tw/tw/cp-132-6617-109b0-1.html
CVE: CVE-2022-39057
Published: 2022-10-18
Description: RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.twcert.org.tw/tw/cp-132-6618-11fd8-1.html; https://www.twcert.org.tw/tw/cp-132-6618-11fd8-1.html
CVE: CVE-2022-39058
Published: 2022-10-18
Description: RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-6619-9b5a7-1.html; https://www.twcert.org.tw/tw/cp-132-6619-9b5a7-1.html
CVE: CVE-2022-31037
Published: 2022-10-18
Description: OroCommerce is an open-source Business to Business Commerce application. Versions between 4.1.0 and 4.1.17 inclusive, 4.2.0 and 4.2.11 inclusive, and between 5.0.0 and 5.0.3 inclusive, are vulnerable to Cross-site Scripting in the UPS Surcharge field of the Shipping rule edit page. The attacker needs permission to create or edit a shipping rule. This issue has been patched in version 5.0.6. There are no known workarounds.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/oroinc/orocommerce/security/advisories/GHSA-4vf4-955g-vxp2; https://github.com/oroinc/orocommerce/security/advisories/GHSA-4vf4-955g-vxp2
CVE: CVE-2022-31122
Published: 2022-10-18
Description: Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to Token Recipient Confusion. If an attacker has certain details of SAML IdP metadata, and configures their own SAML on the same backend, the attacker can delete all SAML authenticated accounts of a targeted team, Authenticate as a user of the attacked team and create arbitrary accounts in the context of the team if it is not managed by SCIM. This issue is fixed in wire-server 2022-07-12 and is already deployed on all Wire managed services. On-premise instances of wire-server need to be updated to 2022-07-12/Chart 4.19.0, so that their backends are no longer affected. As a workaround, the risk of an attack can be reduced by disabling SAML configuration for teams (galley.config.settings.featureFlags.sso). Helm overrides are located in `values/wire-server/values.yaml` Note that the ability to configure SAML SSO as a team is disabled by default for on-premise installations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-1270, CWE-287
References: https://github.com/wireapp/wire-server/security/advisories/GHSA-gq27-gmgq-fmxw; https://github.com/wireapp/wire-server/security/advisories/GHSA-gq27-gmgq-fmxw
CVE: CVE-2022-3338
Published: 2022-10-18
Description: An External XML entity (XXE) vulnerability in ePO prior to 5.10 Update 14 can lead to an unauthenticated remote attacker to potentially trigger a Server Side Request Forgery attack. This can be exploited by mimicking the Agent Handler call to ePO and passing the carefully constructed XML file through the API.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://kcm.trellix.com/corporate/index?page=content&id=SB10387; https://kcm.trellix.com/corporate/index?page=content&id=SB10387
CVE: CVE-2022-3339
Published: 2022-10-18
Description: A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kcm.trellix.com/corporate/index?page=content&id=SB10387; https://kcm.trellix.com/corporate/index?page=content&id=SB10387
CVE: CVE-2021-3305
Published: 2022-10-18
Description: Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: http://beijing.com; http://feishu.com; https://github.com/liong007/Feishu/issues/1
CVE: CVE-2022-3579
Published: 2022-10-18
Description: A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-211186 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://github.com/DisguisedRoot/Exploit/blob/main/SQLInj/POC; https://vuldb.com/?id.211186; https://github.com/DisguisedRoot/Exploit/blob/main/SQLInj/POC
CVE: CVE-2022-3580
Published: 2022-10-18
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-211187.
CVSS Score: 2.4 (LOW)
CWE: CWE-707, CWE-79
References: https://vuldb.com/?id.211187; https://vuldb.com/?id.211187
CVE: CVE-2022-3581
Published: 2022-10-18
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the component Cashiers Tab. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-211188.
CVSS Score: 2.4 (LOW)
CWE: CWE-707, CWE-79
References: https://vuldb.com/?id.211188; https://vuldb.com/?id.211188
CVE: CVE-2022-3582
Published: 2022-10-18
Description: A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211189 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-352
References: https://github.com/jusstSahil/CSRF-/blob/main/POC; https://vuldb.com/?id.211189; https://github.com/jusstSahil/CSRF-/blob/main/POC
CVE: CVE-2022-3583
Published: 2022-10-18
Description: A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-211192.
CVSS Score: 7.3 (HIGH)
CWE: CWE-707, CWE-89
References: https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql1.md; https://vuldb.com/?id.211192; https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql1.md
CVE: CVE-2022-3584
Published: 2022-10-18
Description: A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file edituser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211193 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707
References: https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql2.md; https://vuldb.com/?id.211193; https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql2.md
CVE: CVE-2022-3585
Published: 2022-10-18
Description: A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-211194 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-352
References: https://github.com/souravkr529/CSRF-in-Cold-Storage-Management-System/blob/main/PoC; https://vuldb.com/?id.211194; https://github.com/souravkr529/CSRF-in-Cold-Storage-Management-System/blob/main/PoC
CVE: CVE-2022-40889
Published: 2022-10-18
Description: Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://gist.github.com/T4rnRookie/e644c1dd8e025ab10fc3e3e4bfad2161; https://github.com/qinggan/phpok/issues/13; https://gist.github.com/T4rnRookie/e644c1dd8e025ab10fc3e3e4bfad2161
CVE: CVE-2022-36438
Published: 2022-10-18
Description: AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escalation (this also can be used to delete files within the system arbitrarily). This affects ASUS System Control Interface 3 before 3.1.5.0, and AsusSwitch.exe before 1.0.10.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://asus-my.sharepoint.com/personal/carinacw_li_asus_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713%2FAsus%20Switch%20LPE.pdf&parent=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713&ga=1; https://asus.com; https://asus-my.sharepoint.com/personal/carinacw_li_asus_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713%2FAsus%20Switch%20LPE.pdf&parent=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713&ga=1
CVE: CVE-2022-36439
Published: 2022-10-18
Description: AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the Temp directory and delete another more privileged file via SYSTEM privileges. This affects ASUS System Control Interface 3 before 3.1.5.0, AsusSoftwareManger.exe before 1.0.53.0, and AsusLiveUpdate.dll before 1.0.45.0.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-276
References: https://asus-my.sharepoint.com/personal/carinacw_li_asus_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713%2FAsus%20Arbitary%20File%20Deletion.pdf&parent=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713&ga=1; https://asus.com; https://asus-my.sharepoint.com/personal/carinacw_li_asus_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713%2FAsus%20Arbitary%20File%20Deletion.pdf&parent=%2Fpersonal%2Fcarinacw_li_asus_com%2FDocuments%2FSecurity%2FCase-220713&ga=1
CVE: CVE-2022-3587
Published: 2022-10-18
Description: A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211201 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/rsrahulsingh05/POC/blob/main/Stored%20XSS; https://vuldb.com/?id.211201; https://github.com/rsrahulsingh05/POC/blob/main/Stored%20XSS
CVE: CVE-2022-42202
Published: 2022-10-18
Description: TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.yuque.com/docs/share/b85b8c6f-60ea-4d5c-acc5-3c[PII_REDACTED]; https://www.yuque.com/docs/share/b85b8c6f-60ea-4d5c-acc5-3c[PII_REDACTED]
CVE: CVE-2020-15853
Published: 2022-10-18
Description: supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops responding to requests during this time.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/fedora-infra/supybot-fedora/issues/69; https://github.com/fedora-infra/supybot-fedora/issues/69
CVE: CVE-2022-35844
Published: 2022-10-18
Description: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to commands of the certificate import feature.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-22-247; https://fortiguard.com/psirt/FG-IR-22-247
CVE: CVE-2022-35846
Published: 2022-10-18
Description: An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-307
References: https://fortiguard.com/psirt/FG-IR-22-244; https://fortiguard.com/psirt/FG-IR-22-244
CVE: CVE-2022-40684
Published: 2022-10-18
Description: An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html; http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html; https://fortiguard.com/psirt/FG-IR-22-377
CVE: CVE-2022-41479
Published: 2022-10-18
Description: The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter. This leads to an Insecure Direct Object References (IDOR) vulnerability which allows attackers to access the application source code. NOTE: the vendor disputes this because the retrieved source code is only the DevExpress client-side application code that is, of course, intentionally readable by web browsers (a site's custom code and data is never accessible via an IDOR approach).
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/IthacaLabs/DevExpress/tree/main/ASP.NET_Web_Forms_Build_19.2.3; https://supportcenter.devexpress.com/ticket/details/t1171808/penetration-test-idor-source-code-cve-2022-41479; https://supportcenter.devexpress.com/ticket/details/t190349/false-positive-vulnerabilities-known-alerts-detected-by-various-security-scanners-and
CVE: CVE-2022-41504
Published: 2022-10-18
Description: An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/cx852/bug_report/blob/main/vendors/mayuri_k/billing-system-project/RCE-1.md; https://github.com/cx852/bug_report/blob/main/vendors/mayuri_k/billing-system-project/RCE-1.md
CVE: CVE-2022-29055
Published: 2022-10-18
Description: A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via an HTTP GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-824
References: https://fortiguard.com/psirt/FG-IR-22-086; https://fortiguard.com/psirt/FG-IR-22-086
CVE: CVE-2022-33872
Published: 2022-10-18
Description: An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the underlying shell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-22-237; https://fortiguard.com/psirt/FG-IR-22-237