deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-24881
Published: 2022-04-26
Description: Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but input verification is not done. The fault is rectified in version 1.0.0.beta.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-20
References: https://github.com/ballcat-projects/ballcat-codegen/commit/84a7cb38daf0295b93aba21d562ec627e4eb463b; https://github.com/ballcat-projects/ballcat-codegen/issues/5; https://github.com/ballcat-projects/ballcat-codegen/security/advisories/GHSA-fv3m-xhqw-9m79
CVE: CVE-2022-24882
Published: 2022-04-26
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://github.com/FreeRDP/FreeRDP/pull/7750; https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6x5p-gp49-3jhh
CVE: CVE-2022-24883
Published: 2022-04-26
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.
CVSS Score: 7.4 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/FreeRDP/FreeRDP/commit/4661492e5a617199457c8074bad22f766a116cdc; https://github.com/FreeRDP/FreeRDP/commit/6f473b273a4b6f0cb6aca32b95e22fd0de88e144; https://github.com/FreeRDP/FreeRDP/releases/tag/2.7.0
CVE: CVE-2022-28218
Published: 2022-04-26
Description: An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication (2FA).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://ciphermail.com; https://lists.ciphermail.com/hyperkitty/list/security%40lists.ciphermail.com/thread/WRWHQUACXWXQA42KXXQQ6EEP6SBBM5BM/; https://www.ciphermail.com/webmail-release-notes.html
CVE: CVE-2021-26628
Published: 2022-04-26
Description: Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insufficient. It allows remote attackers to upload arbitrary files disguising them as image files.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79, CWE-434, CWE-79
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66673; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66673
CVE: CVE-2021-26629
Published: 2022-04-26
Description: A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66674; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66674
CVE: CVE-2021-36867
Published: 2022-04-26
Description: Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19 on WordPress possible for users with contributor or higher user rights.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-testing/wordpress-psychological-tests-quizzes-plugin-0-21-19-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/wp-testing/; https://patchstack.com/database/vulnerability/wp-testing/wordpress-psychological-tests-quizzes-plugin-0-21-19-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2021-36895
Published: 2022-04-26
Description: Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/tripetto/wordpress-tripetto-plugin-5-1-4-unauthenticated-cross-site-scripting-xss-vulnerability-via-svg-image-upload; https://wordpress.org/plugins/tripetto/#developers; https://patchstack.com/database/vulnerability/tripetto/wordpress-tripetto-plugin-5-1-4-unauthenticated-cross-site-scripting-xss-vulnerability-via-svg-image-upload
CVE: CVE-2022-1466
Published: 2022-04-26
Description: Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=2050228; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-076.txt; https://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-on-750ga-syss-2021-076
CVE: CVE-2022-24866
Published: 2022-04-26
Description: Discourse Assign is a plugin for assigning users to a topic in Discourse, an open-source messaging platform. Prior to version 1.0.1, the UserBookmarkSerializer serialized the whole User / Group object, which leaked some private information. The data was only being serialized to people who could view assignment info, which is limited to staff by default. For the vast majority of sites, this data was only leaked to trusted staff member, but for sites with assign features enabled publicly, the data was accessible to more people than just staff. Version 1.0.1 contains a patch. There are currently no known workarounds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/discourse/discourse-assign/pull/320; https://github.com/discourse/discourse-assign/security/advisories/GHSA-9xhf-wvjx-f5w9; https://github.com/discourse/discourse-assign/pull/320
CVE: CVE-2022-27854
Published: 2022-04-26
Description: Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19 on WordPress possible for users with contributor or higher role via &wpt_test_page_submit_button_caption parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-testing/wordpress-psychological-tests-quizzes-plugin-0-21-19-authenticated-stored-cross-site-scripting-xss-vulnerability-1; https://wordpress.org/plugins/wp-testing/; https://patchstack.com/database/vulnerability/wp-testing/wordpress-psychological-tests-quizzes-plugin-0-21-19-authenticated-stored-cross-site-scripting-xss-vulnerability-1
CVE: CVE-2022-28448
Published: 2022-04-26
Description: nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). An attacker (role customer) can inject javascript code to First name or Last name at Customer Info.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nopSolutions/nopCommerce/issues/6191; https://github.com/nopSolutions/nopCommerce/issues/6191
CVE: CVE-2022-28058
Published: 2022-04-26
Description: Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/Verytops/verydows/issues/20; https://github.com/zhendezuile/bug_report/blob/main/bug_c; https://github.com/Verytops/verydows/issues/20
CVE: CVE-2022-28059
Published: 2022-04-26
Description: Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/Verytops/verydows/issues/21; https://github.com/zhendezuile/bug_report/blob/main/bug_d; https://github.com/Verytops/verydows/issues/21
CVE: CVE-2022-28449
Published: 2022-04-26
Description: nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nopSolutions/nopCommerce/issues/6192; https://github.com/nopSolutions/nopCommerce/issues/6192
CVE: CVE-2022-28450
Published: 2022-04-26
Description: nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a remote attacker to execute arbitrary JavaScript code at client browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nopSolutions/nopCommerce/issues/6194; https://github.com/nopSolutions/nopCommerce/issues/6194
CVE: CVE-2022-28521
Published: 2022-04-26
Description: ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/jorycn/thinkphp-zcms/issues/4; https://github.com/zhendezuile/bug_report/blob/main/zcms%EF%BC%9Aphp%20file%20inclusion; https://github.com/jorycn/thinkphp-zcms/issues/4
CVE: CVE-2022-28522
Published: 2022-04-26
Description: ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jorycn/thinkphp-zcms/issues/5; https://github.com/zhendezuile/bug_report/blob/main/zcms; https://github.com/jorycn/thinkphp-zcms/issues/5
CVE: CVE-2022-28523
Published: 2022-04-26
Description: HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/Neeke/HongCMS/issues/17; https://github.com/Neeke/HongCMS/issues/17
CVE: CVE-2022-28524
Published: 2022-04-26
Description: ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/chilin89117/ED01-CMS/issues/4; https://github.com/chilin89117/ED01-CMS/issues/4
CVE: CVE-2022-28525
Published: 2022-04-26
Description: ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_user&id=1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/chilin89117/ED01-CMS/issues/5; https://github.com/chilin89117/ED01-CMS/issues/5
CVE: CVE-2022-28527
Published: 2022-04-26
Description: dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/ShaoGongBra/dhcms/issues/5; https://github.com/ShaoGongBra/dhcms/issues/5
CVE: CVE-2022-28528
Published: 2022-04-26
Description: bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/alexlang24/bloofoxCMS/issues/14; https://github.com/alexlang24/bloofoxCMS/issues/14
CVE: CVE-2022-28918
Published: 2022-04-26
Description: GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&plugin_name=.
CVSS Score: 8.1 (HIGH)
References: https://github.com/GreenCMS/GreenCMS/issues/116; https://github.com/GreenCMS/GreenCMS/issues/116
CVE: CVE-2022-26564
Published: 2022-04-26
Description: HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability via the prezzoperiodo4 parameter in creaprezzi.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://rydzak.me/2022/04/cve-2022-26564/; https://www.hoteldruid.com; https://rydzak.me/2022/04/cve-2022-26564/
CVE: CVE-2022-27888
Published: 2022-04-26
Description: Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information (session tokens). This issue was fixed in 2.249.1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-01.md; https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-01.md
CVE: CVE-2021-41041
Published: 2022-04-27
Description: In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-252, CWE-843, CWE-908, CWE-252
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=579744; https://github.com/eclipse-openj9/openj9/pull/14935; https://bugs.eclipse.org/bugs/show_bug.cgi?id=579744
CVE: CVE-2022-27331
Published: 2022-04-27
Description: An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-668
References: https://zammad.com/de/advisories/zaa-2022-02; https://zammad.com/de/advisories/zaa-2022-02
CVE: CVE-2022-27332
Published: 2022-04-27
Description: An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication. This vulnerability can allow attackers to execute phishing attacks or cause a Denial of Service (DoS).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://zammad.com/en/advisories/zaa-2022-01; https://zammad.com/en/advisories/zaa-2022-01
CVE: CVE-2022-28085
Published: 2022-04-27
Description: A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/michaelrsweet/htmldoc/commit/46c8ec2b9bccb8ccabff52d998c5eee77a228348; https://github.com/michaelrsweet/htmldoc/issues/480; https://github.com/michaelrsweet/htmldoc/commit/46c8ec2b9bccb8ccabff52d998c5eee77a228348
CVE: CVE-2022-29700
Published: 2022-04-27
Description: A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://zammad.com/en/advisories/zaa-2022-03; https://zammad.com/en/advisories/zaa-2022-03
CVE: CVE-2022-29701
Published: 2022-04-27
Description: A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://zammad.com/en/advisories/zaa-2022-04; https://zammad.com/en/advisories/zaa-2022-04
CVE: CVE-2022-29810
Published: 2022-04-27
Description: The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://github.com/hashicorp/go-getter/commit/36b68b2f68a3ed10ee7ecbb0cb9f6b1dc5da49cc; https://github.com/hashicorp/go-getter/pull/348; https://github.com/hashicorp/go-getter/releases/tag/v1.5.11
CVE: CVE-2022-1503
Published: 2022-04-27
Description: A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like <script>alert(1)</script> leads to cross site scripting. The attack may be launched remotely but requires authentication. Expoit details have been disclosed within the advisory.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/joinia/project/blob/main/GetSimple/GetSimplereadme.md; https://vuldb.com/?id.198542; https://github.com/joinia/project/blob/main/GetSimple/GetSimplereadme.md
CVE: CVE-2021-46420
Published: 2022-04-27
Description: Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://drive.google.com/file/d/1ubNqP3c_AheIPgdVsF6SZuLNDu4uRDuf/view?usp=sharing; https://drive.google.com/file/d/1ubNqP3c_AheIPgdVsF6SZuLNDu4uRDuf/view?usp=sharing
CVE: CVE-2021-46421
Published: 2022-04-27
Description: Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://drive.google.com/file/d/17y764rRfgab2EhYMEqCIYh__5sOTigqe/view?usp=sharing; https://drive.google.com/file/d/17y764rRfgab2EhYMEqCIYh__5sOTigqe/view?usp=sharing
CVE: CVE-2021-46441
Published: 2022-04-27
Description: In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/tgp-top/D-Link-DIR-825; https://www.dlink.com/en/security-bulletin/; https://github.com/tgp-top/D-Link-DIR-825
CVE: CVE-2021-46442
Published: 2022-04-27
Description: In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/tgp-top/D-Link-DIR-825; https://www.dlink.com/en/security-bulletin/; https://github.com/tgp-top/D-Link-DIR-825
CVE: CVE-2022-1504
Published: 2022-04-27
Description: XSS in /demo/module/?module=HERE in GitHub repository microweber/microweber prior to 1.2.15. Typical impact of XSS attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/1f6a4de416a85e626dc643bb5ceb916e4802223e; https://huntr.dev/bounties/b8e5c324-3dfe-46b4-8095-1697c6b0a6d6; https://github.com/microweber/microweber/commit/1f6a4de416a85e626dc643bb5ceb916e4802223e
CVE: CVE-2021-46422
Published: 2022-04-27
Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/167201/SDT-CW3B1-1.1.0-Command-Injection.html; http://packetstormsecurity.com/files/167387/Telesquare-SDT-CW3B1-1.1.0-Command-Injection.html; https://drive.google.com/drive/folders/1YJlVlb4SlTEGONzIjiMwd2P7ucP_Pm7T?usp=sharing
CVE: CVE-2021-46423
Published: 2022-04-27
Description: Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker to download a full configuration file.
CVSS Score: 5.3 (MEDIUM)
References: https://drive.google.com/drive/folders/1iY4QqzZLdYgwD0LYc74M4Gm2wSC6Be1u?usp=sharing; https://drive.google.com/drive/folders/1iY4QqzZLdYgwD0LYc74M4Gm2wSC6Be1u?usp=sharing
CVE: CVE-2021-46424
Published: 2022-04-27
Description: Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request.
CVSS Score: 9.1 (CRITICAL)
References: http://packetstormsecurity.com/files/167127/TLR-2005KSH-Arbitrary-File-Delete.html; https://drive.google.com/drive/folders/1_e3eJ8fzhCWnCkoRpbLoyQecuKkPR4OD?usp=sharing; http://packetstormsecurity.com/files/167127/TLR-2005KSH-Arbitrary-File-Delete.html
CVE: CVE-2022-24885
Published: 2022-04-27
Description: Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for the problem. There are currently no known workarounds.
CVSS Score: 2.0 (LOW)
CWE: CWE-287, CWE-287
References: https://github.com/nextcloud/android/pull/9816; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-32j4-9xf3-h2mg; https://hackerone.com/reports/1450368
CVE: CVE-2022-24886
Published: 2022-04-27
Description: Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0 contains a fix for this issue. There are currently no known workarounds.
CVSS Score: 2.2 (LOW)
CWE: CWE-200, CWE-732
References: https://github.com/nextcloud/android/pull/9726; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5cj3-v98r-2wmq; https://hackerone.com/reports/1161401
CVE: CVE-2022-24887
Published: 2022-04-27
Description: Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0, when sharing a Deck card in conversation, the metaData can be manipulated so users can be tricked into opening arbitrary URLs. This issue is fixed in versions 11.3.4, 12.2.2, and 13.0.0. There are currently no known workarounds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-j45w-7mpq-264c; https://github.com/nextcloud/spreed/pull/6410; https://hackerone.com/reports/1358977
CVE: CVE-2022-27239
Published: 2022-04-27
Description: In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba; https://bugzilla.samba.org/show_bug.cgi?id=15025; https://bugzilla.suse.com/show_bug.cgi?id=1197216
CVE: CVE-2022-27905
Published: 2022-04-27
Description: In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive (C:\) to exploit this.
CVSS Score: 7.2 (HIGH)
CWE: CWE-428
References: https://www.controlup.com/security/cve-2022-27905/; https://www.controlup.com/security/cve-2022-27905/
CVE: CVE-2022-28464
Published: 2022-04-27
Description: Apifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code execution.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://www.yuque.com/docs/share/b3115557-2dce-4897-b297-454c6df89d18#%20%E3%80%8AThe%20Vulnerability%20of%20Apifox%E3%80%8B; https://www.yuque.com/docs/share/b3115557-2dce-4897-b297-454c6df89d18#%20%E3%80%8AThe%20Vulnerability%20of%20Apifox%E3%80%8B