deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-41571
Published: 2022-02-01
Description: In Apache Pulsar it is possible to access data from BookKeeper that does not belong to the topics accessible by the authenticated user. The Admin API get-message-by-id requires the user to input a topic and a ledger id. The ledger id is a pointer to the data, and it is supposed to be a valid it for the topic. Authorisation controls are performed against the topic name and there is not proper validation the that ledger id is valid in the context of such ledger. So it may happen that the user is able to read from a ledger that contains data owned by another tenant. This issue affects Apache Pulsar Apache Pulsar version 2.8.0 and prior versions; Apache Pulsar version 2.7.3 and prior versions; Apache Pulsar version 2.6.4 and prior versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://github.com/apache/pulsar/issues/11814; https://lists.apache.org/thread/8n3k7pvyh4cf9q2jfzb6pb32ync6xlvr; https://pulsar.apache.org/admin-rest-api/#operation/getLastMessageId
CVE: CVE-2021-43848
Published: 2022-02-01
Description: h2o is an open source http server. In code prior to the `8c0eca3` commit h2o may attempt to access uninitialized memory. When receiving QUIC frames in certain order, HTTP/3 server-side implementation of h2o can be misguided to treat uninitialized memory as HTTP/3 frames that have been received. When h2o is used as a reverse proxy, an attacker can abuse this vulnerability to send internal state of h2o to backend servers controlled by the attacker or third party. Also, if there is an HTTP endpoint that reflects the traffic sent from the client, an attacker can use that reflector to obtain internal state of h2o. This internal state includes traffic of other connections in unencrypted form and TLS session tickets. This vulnerability exists in h2o server with HTTP/3 support, between commit 93af138 and d1f0f65. None of the released versions of h2o are affected by this vulnerability. There are no known workarounds. Users of unreleased versions of h2o using HTTP/3 are advised to upgrade immediately.
CVSS Score: 7.4 (HIGH)
CWE: CWE-908
References: https://github.com/h2o/h2o/commit/8c0eca3; https://github.com/h2o/h2o/security/advisories/GHSA-f9xw-j925-m4m4; https://github.com/h2o/h2o/commit/8c0eca3
CVE: CVE-2021-45416
Published: 2022-02-01
Description: Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://rosariosis.com; https://github.com/86x/CVE-2021-45416; http://rosariosis.com
CVE: CVE-2021-46253
Published: 2022-02-01
Description: A cross-site scripting (XSS) vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://anchorcms.com; https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2021-46253/CVE-2021-46253.pdf; https://anchorcms.com
CVE: CVE-2022-0220
Published: 2022-02-01
Description: The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web browser led to this endpoint. Javascript code may be executed on a victim's browser. Due to v1.9.26 adding a CSRF check, the XSS is only exploitable against unauthenticated users (as they all share the same nonce)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-116
References: https://wpscan.com/vulnerability/a91a01b9-7e36-4280-bc50-f6cff3e66059; https://wpscan.com/vulnerability/a91a01b9-7e36-4280-bc50-f6cff3e66059
CVE: CVE-2022-0320
Published: 2022-02-01
Description: The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data before it them in include statements, which could allow unauthenticated attackers to perform Local File Inclusion attack and read arbitrary files on the server, this could also lead to RCE via user uploaded files or other LFI to RCE techniques.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://wpscan.com/vulnerability/0d02b222-e672-4ac0-a1d4-d34e1ecf4a95; https://wpscan.com/vulnerability/0d02b222-e672-4ac0-a1d4-d34e1ecf4a95
CVE: CVE-2022-0401
Published: 2022-02-01
Description: Path Traversal in NPM w-zip prior to 1.0.12.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/yuda-lyu/w-zip/commit/d7039d034e02fa358e[PII_REDACTED]cedf5fa83288; https://huntr.dev/bounties/d93259aa-ad03-43d6-8846-a00b9f58876d; https://github.com/yuda-lyu/w-zip/commit/d7039d034e02fa358e[PII_REDACTED]cedf5fa83288
CVE: CVE-2022-0417
Published: 2022-02-01
Description: Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/vim/vim/commit/652dee448618589de5528a9e9a36995803f5557a; https://huntr.dev/bounties/fc86bc8d-c866-4ade-8b7f-e49cec306d1a; https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html
CVE: CVE-2022-23601
Published: 2022-02-01
Description: Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony form component provides a CSRF protection mechanism by using a random token injected in the form and using the session to store and control the token submitted by the user. When using the FrameworkBundle, this protection can be enabled or disabled with the configuration. If the configuration is not specified, by default, the mechanism is enabled as long as the session is enabled. In a recent change in the way the configuration is loaded, the default behavior has been dropped and, as a result, the CSRF protection is not enabled in form when not explicitly enabled, which makes the application sensible to CSRF attacks. This issue has been resolved in the patch versions listed and users are advised to update. There are no known workarounds for this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/symfony/symfony/commit/f0ffb775febdf07e57117aabadac96fa37857f50; https://github.com/symfony/symfony/security/advisories/GHSA-vvmr-8829-6whx; https://github.com/symfony/symfony/commit/f0ffb775febdf07e57117aabadac96fa37857f50
CVE: CVE-2021-43509
Published: 2022-02-01
Description: SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43509; https://r4hn1.medium.com/journey-to-first-two-cve-by-rahul-kalnarayan-307e2e87ee26; https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43509
CVE: CVE-2021-43510
Published: 2022-02-01
Description: SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43510; https://r4hn1.medium.com/journey-to-first-two-cve-by-rahul-kalnarayan-307e2e87ee26; https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43510
CVE: CVE-2021-44451
Published: 2022-02-01
Description: Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://lists.apache.org/thread/xww1pccs2ckb5506wrf1v4lmxg198vkb; https://lists.apache.org/thread/xww1pccs2ckb5506wrf1v4lmxg198vkb
CVE: CVE-2021-44746
Published: 2022-02-01
Description: UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900 Series V5.3.0.0 and prior, Data Maintenance Tool for DT800 Series V4.2.0.0 and prior allows a remote attacker who can access to the internal network, the configuration information may be obtained.
CVSS Score: 5.3 (MEDIUM)
References: https://www.necplatforms.co.jp/en/product/security_adv/211217.html; https://www.necplatforms.co.jp/en/product/security_adv/211217.html
CVE: CVE-2021-38560
Published: 2022-02-01
Description: Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forums.ivanti.com/s/article/Ivanti-Service-Manager-Asset-Manager-2021-1-Release-Notes?language=en_US; https://github.com/os909/iVANTI-CVE-2021-38560; https://forums.ivanti.com/s/article/Ivanti-Service-Manager-Asset-Manager-2021-1-Release-Notes?language=en_US
CVE: CVE-2021-46093
Published: 2022-02-01
Description: eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://github.com/jsjbcyber/bug_report/blob/main/bug_a; https://github.com/jsjbcyber/bug_report/blob/main/bug_a
CVE: CVE-2022-24218
Published: 2022-02-01
Description: An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/jsjbcyber/bug_report/blob/main/bug_b; https://github.com/jsjbcyber/bug_report/blob/main/bug_b
CVE: CVE-2022-24219
Published: 2022-02-01
Description: eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jsjbcyber/bug_report/blob/main/bug_c; https://github.com/jsjbcyber/bug_report/blob/main/bug_c
CVE: CVE-2022-24220
Published: 2022-02-01
Description: eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jsjbcyber/bug_report/blob/main/bug_d; https://github.com/jsjbcyber/bug_report/blob/main/bug_d
CVE: CVE-2022-24221
Published: 2022-02-01
Description: eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jsjbcyber/bug_report/blob/main/bug_e; https://github.com/jsjbcyber/bug_report/blob/main/bug_e
CVE: CVE-2022-24222
Published: 2022-02-01
Description: eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jsjbcyber/bug_report/blob/main/bug_f; https://github.com/jsjbcyber/bug_report/blob/main/bug_f
CVE: CVE-2022-24223
Published: 2022-02-01
Description: AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/165922/Atom-CMS-2.0-SQL-Injection.html; https://github.com/thedigicraft/Atom.CMS/issues/255; http://packetstormsecurity.com/files/165922/Atom-CMS-2.0-SQL-Injection.html
CVE: CVE-2022-24196
Published: 2022-02-01
Description: iText v7.1.17, up to (exluding)": 7.1.18 and 7.2.2 was discovered to contain an out-of-memory error via the component readStreamBytesRaw, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/itext/itext7/pull/78; https://github.com/itext/itext7/pull/78#issuecomment[PII_REDACTED]; https://github.com/itext/itext7/releases/tag/7.1.18
CVE: CVE-2022-24197
Published: 2022-02-01
Description: iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/itext/itext7/pull/78; https://github.com/itext/itext7/pull/78#issuecomment[PII_REDACTED]; https://github.com/itext/itext7/releases/tag/7.1.18
CVE: CVE-2022-24198
Published: 2022-02-01
Description: iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. NOTE: Vendor does not view this as a vulnerability and has not found it to be exploitable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/itext/itext7/pull/78; https://github.com/itext/itext7/pull/78#issuecomment[PII_REDACTED]; https://github.com/itext/itext7/pull/78
CVE: CVE-2021-42638
Published: 2022-02-01
Description: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77
References: http://printerlogic.com; https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints; https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
CVE: CVE-2022-24300
Published: 2022-02-02
Description: Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.
CVSS Score: 9.8 (CRITICAL)
References: https://bugs.debian.org/1004223; https://github.com/minetest/minetest/commit/b5956bde259faa240a81060ff4e598e25ad52dae; https://github.com/minetest/minetest/security/advisories/GHSA-hwj2-xf72-r4cf
CVE: CVE-2022-24301
Published: 2022-02-02
Description: In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: https://github.com/minetest/minetest/commit/3693b6871eba268ecc79b3f52d00d3cefe761131; https://github.com/minetest/minetest/security/advisories/GHSA-fvwv-qcq6-wmp5; https://www.debian.org/security/2022/dsa-5075
CVE: CVE-2021-36177
Published: 2022-02-02
Description: An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database.
CVSS Score: 4.2 (MEDIUM)
References: https://fortiguard.com/psirt/FG-IR-20-217; https://fortiguard.com/psirt/FG-IR-20-217
CVE: CVE-2021-41016
Published: 2022-02-02
Description: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiExtender version 7.0.1 and below, 4.2.3 and below, 4.1.7 and below allows an authenticated attacker to execute privileged shell commands via CLI commands including special characters
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-148; https://fortiguard.com/advisory/FG-IR-21-148
CVE: CVE-2021-42753
Published: 2022-02-02
Description: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.x, 6.1.x, 6.0.x, 5.9.x and 5.8.x may allow an authenticated attacker to perform an arbitrary file and directory deletion in the device filesystem.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://fortiguard.com/psirt/FG-IR-21-158; https://fortiguard.com/psirt/FG-IR-21-158
CVE: CVE-2021-43062
Published: 2022-02-02
Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below, version 6.3.7 and below, version 6.0.11 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the FortiGuard URI protection service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/166055/Fortinet-Fortimail-7.0.1-Cross-Site-Scripting.html; https://fortiguard.com/advisory/FG-IR-21-185; http://packetstormsecurity.com/files/166055/Fortinet-Fortimail-7.0.1-Cross-Site-Scripting.html
CVE: CVE-2021-43073
Published: 2022-02-02
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-180; https://fortiguard.com/advisory/FG-IR-21-180
CVE: CVE-2020-26208
Published: 2022-02-02
Description: JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting in a program crash or potentially incorrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1900821; https://github.com/F-ZhaoYang/jhead/commit/5186ddcf9e35a7aa0ff0539489a930434a1325f4; https://github.com/F-ZhaoYang/jhead/security/advisories/GHSA-7pr6-xq4f-qhgc
CVE: CVE-2021-24043
Published: 2022-02-02
Description: A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business for iOS 2.21.230.7, and WhatsApp Desktop v2.2145.0 could have allowed an out-of-bounds heap read if a user sent a malformed RTCP packet during an established call.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.whatsapp.com/security/advisories/2021/; https://www.whatsapp.com/security/advisories/2022/; https://www.whatsapp.com/security/advisories/2021/
CVE: CVE-2021-36193
Published: 2022-02-02
Description: Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://fortiguard.com/advisory/FG-IR-21-132; https://fortiguard.com/advisory/FG-IR-21-132
CVE: CVE-2021-39044
Published: 2022-02-02
Description: IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 214210.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/214210; https://www.ibm.com/support/pages/node/6527892; https://exchange.xforce.ibmcloud.com/vulnerabilities/214210
CVE: CVE-2021-39066
Published: 2022-02-02
Description: IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/215040; https://www.ibm.com/support/pages/node/6527892; https://exchange.xforce.ibmcloud.com/vulnerabilities/215040
CVE: CVE-2021-39070
Published: 2022-02-02
Description: IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on the system. IBM X-Force ID: 215353.
CVSS Score: 9.8 (CRITICAL)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/215353; https://www.ibm.com/support/pages/node/6552318; https://exchange.xforce.ibmcloud.com/vulnerabilities/215353
CVE: CVE-2021-41018
Published: 2022-02-02
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-166; https://fortiguard.com/advisory/FG-IR-21-166
CVE: CVE-2022-0366
Published: 2022-02-02
Description: An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console between versions 4.6.0 and 4.9.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20220201-cap8-console-sqli; https://www.sophos.com/en-us/security-advisories/sophos-sa-20220201-cap8-console-sqli
CVE: CVE-2022-21724
Published: 2022-02-02
Description: pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based on class names provided via `authenticationPluginClassName`, `sslhostnameverifier`, `socketFactory`, `sslfactory`, `sslpasswordcallback` connection properties. However, the driver did not verify if the class implements the expected interface before instantiating the class. This can lead to code execution loaded via arbitrary classes. Users using plugins are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.0 (HIGH)
CWE: CWE-665, CWE-665
References: https://github.com/pgjdbc/pgjdbc/commit/f4d0ed69c0b3aae8531d83d6af4c57f22312c813; https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-v7wg-cpwc-24m4; https://lists.debian.org/debian-lts-announce/2022/05/msg00027.html
CVE: CVE-2022-21817
Published: 2022-02-02
Description: NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity.
CVSS Score: 9.3 (CRITICAL)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5318; https://nvidia.custhelp.com/app/answers/detail/a_id/5318
CVE: CVE-2022-22509
Published: 2022-02-02
Description: In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://cert.vde.com/en/advisories/VDE-2022-001/; https://cert.vde.com/en/advisories/VDE-2022-001/
CVE: CVE-2022-22510
Published: 2022-02-02
Description: Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17020&token=9acf91a2b5e1719ff71a019e86c3e8e411bfd252&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17020&token=9acf91a2b5e1719ff71a019e86c3e8e411bfd252&download=
CVE: CVE-2021-42633
Published: 2022-02-02
Description: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: http://printerlogic.com; https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints; https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html
CVE: CVE-2021-42637
Published: 2022-02-02
Description: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://printerlogic.com; https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints; https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html