deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-39788
Published: 2022-03-30
Description: In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the device due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-191768014
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://source.android.com/security/bulletin/android-12l; https://source.android.com/security/bulletin/android-12l
CVE: CVE-2021-39789
Published: 2022-03-30
Description: In Telecom, there is a possible leak of TTY mode change due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-203880906
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/android-12l; https://source.android.com/security/bulletin/android-12l
CVE: CVE-2021-39790
Published: 2022-03-30
Description: In Dialer, there is a possible way to manipulate visual voicemail settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-186405146
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://source.android.com/security/bulletin/android-12l; https://source.android.com/security/bulletin/android-12l
CVE: CVE-2021-39791
Published: 2022-03-30
Description: In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-194112606
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://source.android.com/security/bulletin/android-12l; https://source.android.com/security/bulletin/android-12l
CVE: CVE-2021-3456
Published: 2022-03-30
Description: An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1941001; https://bugzilla.redhat.com/show_bug.cgi?id=1941001
CVE: CVE-2022-0998
Published: 2022-03-30
Description: An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: http://www.openwall.com/lists/oss-security/2022/04/02/1; https://lore.kernel.org/netdev/[PII_REDACTED][PII_REDACTED]-13-sashal%40kernel.org/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-20002
Published: 2022-03-30
Description: In incfs, there is a possible way of mounting on arbitrary paths due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-198657657
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/android-12l; https://source.android.com/security/bulletin/android-12l
CVE: CVE-2022-22996
Published: 2022-03-30
Description: The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.westerndigital.com/support/product-security/wdc-22007-sandisk-professional-g-raid-4-8-software-utility-setup-for-windows-privilege-escalation; https://www.westerndigital.com/support/product-security/wdc-22007-sandisk-professional-g-raid-4-8-software-utility-setup-for-windows-privilege-escalation
CVE: CVE-2022-23136
Published: 2022-03-30
Description: There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1024084; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1024084
CVE: CVE-2022-23793
Published: 2022-03-30
Description: An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/166546/Joomla-4.1.0-Zip-Slip-File-Overwrite-Path-Traversal.html; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-zip-slip-within-the-tar-extractor.html; http://packetstormsecurity.com/files/166546/Joomla-4.1.0-Zip-Slip-File-Overwrite-Path-Traversal.html
CVE: CVE-2022-23794
Published: 2022-03-30
Description: An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-path-disclosure-within-filesystem-error-messages.html; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-path-disclosure-within-filesystem-error-messages.html
CVE: CVE-2022-23795
Published: 2022-03-30
Description: An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. A user row was not bound to a specific authentication mechanism which could under very special circumstances allow an account takeover.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-user-row-are-not-bound-to-a-authentication-mechanism.html; https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-user-row-are-not-bound-to-a-authentication-mechanism.html
CVE: CVE-2022-23796
Published: 2022-03-30
Description: An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]4-core-missing-input-validation-within-com-fields-class-inputs.html; https://developer.joomla.org/security-centre/[PII_REDACTED]4-core-missing-input-validation-within-com-fields-class-inputs.html
CVE: CVE-2022-23797
Published: 2022-03-30
Description: An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate filtering on the selected Ids on an request could resulted into an possible SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://developer.joomla.org/security-centre/[PII_REDACTED]5-core-inadequate-filtering-on-the-selected-ids.html; https://developer.joomla.org/security-centre/[PII_REDACTED]5-core-inadequate-filtering-on-the-selected-ids.html
CVE: CVE-2022-23798
Published: 2022-03-30
Description: An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://developer.joomla.org/security-centre/[PII_REDACTED]6-core-inadequate-validation-of-internal-urls.html; https://developer.joomla.org/security-centre/[PII_REDACTED]6-core-inadequate-validation-of-internal-urls.html
CVE: CVE-2022-23799
Published: 2022-03-30
Description: An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data.
CVSS Score: 9.8 (CRITICAL)
References: https://developer.joomla.org/security-centre/[PII_REDACTED]7-core-variable-tampering-on-jinput-request-data.html; https://developer.joomla.org/security-centre/[PII_REDACTED]7-core-variable-tampering-on-jinput-request-data.html
CVE: CVE-2022-23800
Published: 2022-03-30
Description: An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]8-core-inadequate-content-filtering-within-the-filter-code.html; https://developer.joomla.org/security-centre/[PII_REDACTED]8-core-inadequate-content-filtering-within-the-filter-code.html
CVE: CVE-2022-23801
Published: 2022-03-30
Description: An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]9-core-xss-attack-vector-through-svg.html; https://developer.joomla.org/security-centre/[PII_REDACTED]9-core-xss-attack-vector-through-svg.html
CVE: CVE-2022-27907
Published: 2022-03-30
Description: Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://sonatype.com; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]555; https://sonatype.com
CVE: CVE-2021-44310
Published: 2022-03-30
Description: An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges, the attacker could perform stored XSS attacks by inserting JavaScript and HTML code in user creation functionality.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://brainy-sternum-995.notion.site/CVE-2021-44310-Reserved-e9efc897f9944464b8807d44c6fc21df; https://brainy-sternum-995.notion.site/CVE-2021-44310-Reserved-e9efc897f9944464b8807d44c6fc21df
CVE: CVE-2021-44312
Published: 2022-03-30
Description: An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a CSRF attack through visiting a crafted web page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://brainy-sternum-995.notion.site/CVE-2021-44312-Reserved-b4a4415e95444c0e847f926a9e9d6266; https://brainy-sternum-995.notion.site/CVE-2021-44312-Reserved-b4a4415e95444c0e847f926a9e9d6266
CVE: CVE-2022-22772
Published: 2022-03-30
Description: The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO Managed File Transfer Platform Server for z/Linux contain a difficult to exploit Remote Code Execution (RCE) vulnerability that allows a low privileged attacker with network access to execute arbitrary code on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX: versions 8.1.0 and below and TIBCO Managed File Transfer Platform Server for z/Linux: versions 8.1.0 and below.
CVSS Score: 8.5 (HIGH)
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2022/03/tibco-security-advisory-march-30-2022-tibco-managed-file-transfer-2022-22772; https://www.tibco.com/services/support/advisories
CVE: CVE-2022-24132
Published: 2022-03-30
Description: phpshe V1.8 is affected by a denial of service (DoS) attack in the registry's verification code, which can paralyze the target service.
CVSS Score: 7.5 (HIGH)
References: https://github.com/zpxlz/phpshe/; https://github.com/zpxlz/phpshe/
CVE: CVE-2022-24135
Published: 2022-03-30
Description: QingScan 1.3.0 is affected by Cross Site Scripting (XSS) vulnerability in all search functions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/78778443/QingScan/issues/17; https://github.com/78778443/QingScan/issues/17
CVE: CVE-2022-27772
Published: 2022-03-30
Description: spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only affects products and/or versions that are no longer supported by the maintainer
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85; https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85
CVE: CVE-2022-28223
Published: 2022-03-30
Description: Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://medium.com/%40bertinjoseb/post-auth-rce-based-in-malicious-lua-plugin-script-upload-scada-controllers-located-in-russia-57044425ac38; https://medium.com/%40bertinjoseb/post-auth-rce-based-in-malicious-lua-plugin-script-upload-scada-controllers-located-in-russia-57044425ac38
CVE: CVE-2022-1160
Published: 2022-03-30
Description: heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/vim/vim/commit/2bdad6126778f907c0b98002bfebf0e611a3f5db; https://huntr.dev/bounties/a6f3222d-2472-439d-8881-111138a5694c; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/
CVE: CVE-2019-12266
Published: 2022-03-30
Description: Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.
CVSS Score: 7.6 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/; https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/
CVE: CVE-2019-9564
Published: 2022-03-30
Description: A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/; https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/
CVE: CVE-2021-45031
Published: 2022-03-30
Description: A vulnerability in MEPSAN's USC+ before version 3.0 has a weakness in login function which lets attackers to generate high privileged accounts passwords.
CVSS Score: 7.7 (HIGH)
CWE: CWE-305
References: https://www.usom.gov.tr/bildirim/tr-22-0269; https://www.usom.gov.tr/bildirim/tr-22-0269
CVE: CVE-2021-40644
Published: 2022-03-30
Description: An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://gitee.com/aaluoxiang/oa_system; https://github.com/novysodope/VulReq/blob/main/oa_system; https://gitee.com/aaluoxiang/oa_system
CVE: CVE-2021-40645
Published: 2022-03-30
Description: An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskController.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://gitee.com/glorylion/JFinalOA; https://github.com/novysodope/VulReq/blob/main/JFinalOA; https://gitee.com/glorylion/JFinalOA
CVE: CVE-2022-24763
Published: 2022-03-30
Description: PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update. There are no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://github.com/pjsip/pjproject/commit/856f87c2e97a27b256482dbe0d748b1194355a21; https://github.com/pjsip/pjproject/security/advisories/GHSA-5x45-qp78-g4p4; https://lists.debian.org/debian-lts-announce/2022/05/msg00047.html
CVE: CVE-2021-33208
Published: 2022-03-30
Description: The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-611
References: https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33208; https://www.softwareag.com/corporate/products/az/mashzone_nextgen/default; https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33208
CVE: CVE-2021-33581
Published: 2022-03-30
Description: MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the availability of a PPM connection. This occurs in com.idsscheer.ppmmashup.web.webservice.impl.ZPrestoAdminWebService.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33581; https://www.softwareag.com/corporate/products/az/mashzone_nextgen/default; https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33581
CVE: CVE-2021-38362
Published: 2022-03-30
Description: In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct Object Reference (IDOR) issue and retrieve sensitive data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://github.com/fireeye/Vulnerability-Disclosures; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0021/MNDT-2022-0021.md; https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497
CVE: CVE-2021-43142
Published: 2022-03-30
Description: An XML External Entity (XXE) vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://novysodope.github.io/2021/10/29/64/; https://novysodope.github.io/2021/10/29/64/
CVE: CVE-2021-45900
Published: 2022-03-30
Description: Vivoh Webinar Manager before 3.6.3.0 has improper API authentication. When a user logs in to the administration configuration web portlet, a VIVOH_AUTH cookie is assigned so that they can be uniquely identified. Certain APIs can be successfully executed without proper authentication. This can let an attacker impersonate as victim and make state changing requests on their behalf.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://vivoh.com/blog/finra-remediation/; https://vivoh.com/wp-content/uploads/2021/11/Vivoh-Webinar-Manager-for-Zoom-Installation-and-Administration-Guide.pdf; https://vivoh.com/blog/finra-remediation/
CVE: CVE-2022-24790
Published: 2022-03-30
Description: Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that the incoming HTTP request matches the RFC7230 standard, Puma and the frontend proxy may disagree on where a request starts and ends. This would allow requests to be smuggled via the front-end proxy to Puma. The vulnerability has been fixed in 5.6.4 and 4.3.12. Users are advised to upgrade as soon as possible. Workaround: when deploying a proxy in front of Puma, turning on any and all functionality to make sure that the request matches the RFC7230 standard.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-444
References: https://github.com/puma/puma/commit/5bb7d202e24dec00a898dca4aa11db391d7787a5; https://github.com/puma/puma/security/advisories/GHSA-h99w-9q5r-gjq9; https://lists.debian.org/debian-lts-announce/2022/08/msg00015.html
CVE: CVE-2021-33523
Published: 2022-03-30
Description: MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the underlying host. This occurs in com.idsscheer.ppmmashup.business.jdbc.DriverUploadController.
CVSS Score: 7.2 (HIGH)
References: https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33523; https://www.softwareag.com/corporate/products/az/mashzone_nextgen/default; https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33523
CVE: CVE-2021-43664
Published: 2022-03-30
Description: totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process&nbsp;forceugpo.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77
References: https://github.com/chibataiki/iot-vuls/blob/main/totolink/command-injection2.md; https://github.com/chibataiki/iot-vuls/blob/main/totolink/command-injection2.md
CVE: CVE-2021-46006
Published: 2022-03-30
Description: In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: http://a3100r.com; http://totolink.com; https://hackmd.io/vS-OfUEzSqqKh8e1PKce5A
CVE: CVE-2021-46007
Published: 2022-03-30
Description: totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the "ping" command, and the input field does not adequately filter special symbols. This can lead to command injection attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://a3100r.com; http://totolink.com; https://hackmd.io/t_nRWxS2Q2O7GV2E5BhQMg
CVE: CVE-2021-46008
Published: 2022-03-30
Description: In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi, can easily telnet into the target with root shell if the telnet is function turned on.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://a3100r.com; http://totolink.com; https://hackmd.io/ZkeEB-VvRiWBS53rFKG8DQ
CVE: CVE-2021-46009
Published: 2022-03-30
Description: In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://a3100r.com; http://totolink.com; https://hackmd.io/-riYp6Q-ReCx-dKKWFBTLg
CVE: CVE-2021-46010
Published: 2022-03-30
Description: Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-330
References: http://a3100r.com; http://totolink.com; https://hackmd.io/Ynwm8NnQSiK0xm7QKuNteg
CVE: CVE-2022-25008
Published: 2022-03-30
Description: totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://github.com/chibataiki/iot-vuls/blob/main/totolink/missing-authentication.md; https://github.com/chibataiki/iot-vuls/blob/main/totolink/missing-authentication.md
CVE: CVE-2022-26644
Published: 2022-03-30
Description: Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via parameters on user profile, system_info and accounts management.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://online.com; https://github.com/erik-451/CVE/tree/main/CVE-2022-26644; http://online.com