deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-37913
Published: 2022-10-28
Description: Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges leading to a complete compromise of the Aruba EdgeConnect Enterprise Orchestrator with versions 9.1.2.40051 and below, 9.0.7.40108 and below, 8.10.23.40009 and below, and any older branches of Orchestrator not specifically mentioned.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-015.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-015.txt
CVE: CVE-2022-37914
Published: 2022-10-28
Description: Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges leading to a complete compromise of the Aruba EdgeConnect Enterprise Orchestrator with versions 9.1.2.40051 and below, 9.0.7.40108 and below, 8.10.23.40009 and below, and any older branches of Orchestrator not specifically mentioned.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-015.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-015.txt
CVE: CVE-2022-37915
Published: 2022-10-28
Description: A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to a complete system compromise of Aruba EdgeConnect Enterprise Orchestration with versions 9.1.x branch only, Any 9.1.x Orchestrator instantiated as a new machine with a release prior to 9.1.3.40197, Orchestrators upgraded to 9.1.x were not affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-015.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-015.txt
CVE: CVE-2022-3616
Published: 2022-10-28
Description: Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer SIT, ATHENE, who discovered and reported this vulnerability.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-754, CWE-834, CWE-834
References: https://github.com/cloudflare/cfrpki/security/advisories/GHSA-pmw9-567p-68pc; https://github.com/cloudflare/cfrpki/security/advisories/GHSA-pmw9-567p-68pc
CVE: CVE-2022-26884
Published: 2022-10-28
Description: Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.openwall.com/lists/oss-security/2022/10/28/2; https://lists.apache.org/thread/xfdst5y4hnrm2ntmc5jzrgmw2htyyb9c; http://www.openwall.com/lists/oss-security/2022/10/28/2
CVE: CVE-2022-3729
Published: 2022-10-28
Description: A vulnerability, which was classified as critical, has been found in seccome Ehoney. This issue affects some unknown processing of the file /api/v1/attack. The manipulation of the argument AttackIP leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-212411.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://vuldb.com/?id.212411; https://vuldb.com/?id.212411
CVE: CVE-2022-3730
Published: 2022-10-28
Description: A vulnerability, which was classified as critical, was found in seccome Ehoney. Affected is an unknown function of the file /api/v1/attack/falco. The manipulation of the argument Payload leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-212412.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707
References: https://vuldb.com/?id.212412; https://vuldb.com/?id.212412
CVE: CVE-2022-3731
Published: 2022-10-28
Description: A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launched remotely. The identifier VDB-212413 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707
References: https://vuldb.com/?id.212413; https://vuldb.com/?id.212413
CVE: CVE-2022-3732
Published: 2022-10-28
Description: A vulnerability was found in seccome Ehoney and classified as critical. Affected by this issue is some unknown functionality of the file /api/v1/bait/set. The manipulation of the argument Payload leads to sql injection. The attack may be launched remotely. VDB-212414 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://vuldb.com/?id.212414; https://vuldb.com/?id.212414
CVE: CVE-2022-3733
Published: 2022-10-28
Description: A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. This affects an unknown part of the file Admin/edit-admin.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212415.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-707
References: https://blog.csdn.net/qq_41988749/article/details/127552717?spm=1001.2014.3001.5502; https://vuldb.com/?id.212415; https://blog.csdn.net/qq_41988749/article/details/127552717?spm=1001.2014.3001.5502
CVE: CVE-2022-3734
Published: 2022-10-28
Description: A vulnerability was found in a port or fork of Redis. It has been declared as critical. This vulnerability affects unknown code in the library C:/Program Files/Redis/dbghelp.dll. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of this vulnerability is VDB-212416. NOTE: The official Redis release is not affected. This issue might affect an unofficial fork or port on Windows only.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-426
References: https://vuldb.com/?id.212416; https://www.cnblogs.com/J0o1ey/p/16829380.html; https://vuldb.com/?id.212416
CVE: CVE-2022-3735
Published: 2022-10-28
Description: A vulnerability was found in seccome Ehoney. It has been rated as critical. This issue affects some unknown processing of the file /api/public/signup. The manipulation leads to improper access controls. The identifier VDB-212417 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266
References: https://vuldb.com/?id.212417; https://vuldb.com/?id.212417
CVE: CVE-2022-3320
Published: 2022-10-28
Description: It was possible to bypass policies configured for Zero Trust Secure Web Gateway by using warp-cli 'set-custom-endpoint' subcommand. Using this command with an unreachable endpoint caused the WARP Client to disconnect and allowed bypassing administrative restrictions on a Zero Trust enrolled endpoint. 






CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf; https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf
CVE: CVE-2022-3321
Published: 2022-10-28
Description: It was possible to bypass  Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch  on the WARP iOS mobile client by enabling both "Disable for cellular networks" and "Disable for Wi-Fi networks" switches at once in the application settings. Such configuration caused the WARP client to disconnect and allowed the user to bypass restrictions and policies enforced by the Zero Trust platform.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/cloudflare/advisories/security/advisories/GHSA-4463-5p9m-3c78; https://github.com/cloudflare/advisories/security/advisories/GHSA-4463-5p9m-3c78
CVE: CVE-2022-3322
Published: 2022-10-28
Description: Lock Warp switch is a feature of Zero Trust platform which, when
 enabled, prevents users of enrolled devices from disabling WARP client.
 Due to insufficient policy verification by WARP iOS client, this 
feature could be bypassed by using the "Disable WARP" quick action.




CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862, CWE-347
References: https://github.com/cloudflare/advisories/security/advisories/GHSA-76pg-rp9h-wmcj; https://github.com/cloudflare/advisories/security/advisories/GHSA-76pg-rp9h-wmcj
CVE: CVE-2022-3337
Published: 2022-10-28
Description: It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the  Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch  feature
 being enabled on Zero Trust Platform. This led to bypassing policies 
and restrictions enforced for enrolled devices by the Zero Trust 
platform.




CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862, CWE-290, CWE-862
References: https://github.com/cloudflare/advisories/security/advisories/GHSA-vr93-4vx7-332p; https://github.com/cloudflare/advisories/security/advisories/GHSA-vr93-4vx7-332p
CVE: CVE-2022-3512
Published: 2022-10-28
Description: Using warp-cli command "add-trusted-ssid", a user was able to disconnect WARP client and bypass the "Lock WARP switch" feature resulting in Zero Trust policies not being enforced on an affected endpoint.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862
References: https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf; https://github.com/cloudflare/advisories/security/advisories/GHSA-3868-hwjx-r5xf
CVE: CVE-2022-3741
Published: 2022-10-28
Description: Impact varies for each individual vulnerability in the application. For generation of accounts, it may be possible, depending on the amount of system resources available, to create a DoS event in the server. These accounts still need to be activated; however, it is possible to identify the output Status Code to separate accounts that are generated and waiting for email verification. \n\nFor the sign in directories, it is possible to brute force login attempts to either login portal, which could lead to account compromise.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-307
References: https://github.com/chatwoot/chatwoot/commit/9525d4f0346a2fdac13a0253f9180d20104a72d3; https://huntr.dev/bounties/46f6e07e-f438-4540-938a-510047f987d0; https://github.com/chatwoot/chatwoot/commit/9525d4f0346a2fdac13a0253f9180d20104a72d3
CVE: CVE-2022-43275
Published: 2022-10-28
Description: Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/01001000entai/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/RCE-1.md; https://github.com/01001000entai/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/RCE-1.md
CVE: CVE-2022-43276
Published: 2022-10-28
Description: Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /php_action/fetchSelectedfood.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/01001000entai/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-1.md; https://github.com/01001000entai/bug_report/blob/main/vendors/mayuri_k/canteen-management-system/SQLi-1.md
CVE: CVE-2021-35387
Published: 2022-10-28
Description: Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/Hospital-Management-System/blob/main/Hospital%20Management%20System.md; https://phpgurukul.com/hospital-management-system-in-php; https://github.com/BigTiger2020/Hospital-Management-System/blob/main/Hospital%20Management%20System.md
CVE: CVE-2021-35388
Published: 2022-10-28
Description: Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/BigTiger2020/Hospital-Management-System/blob/main/xss.md; https://phpgurukul.com/hospital-management-system-in-php; https://github.com/BigTiger2020/Hospital-Management-System/blob/main/xss.md
CVE: CVE-2021-37781
Published: 2022-10-28
Description: Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/BigTiger2020/Employee-Record-Management-System/blob/main/Employee%20Record%20Management%20System%20-%20xss.md; https://phpgurukul.com/employee-record-management-system-in-php-and-mysql/; https://github.com/BigTiger2020/Employee-Record-Management-System/blob/main/Employee%20Record%20Management%20System%20-%20xss.md
CVE: CVE-2021-37782
Published: 2022-10-28
Description: Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/Employee-Record-Management-System/blob/main/Employee%20Record%20Management%20System.md; https://phpgurukul.com/employee-record-management-system-in-php-and-mysql/; https://github.com/BigTiger2020/Employee-Record-Management-System/blob/main/Employee%20Record%20Management%20System.md
CVE: CVE-2021-38734
Published: 2022-10-28
Description: SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-2.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-2.md
CVE: CVE-2021-38736
Published: 2022-10-28
Description: SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-1.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-1.md
CVE: CVE-2021-38737
Published: 2022-10-28
Description: SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-6.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-6.md
CVE: CVE-2022-2882
Published: 2022-10-28
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. A malicious maintainer could exfiltrate a GitHub integration's access token by modifying the integration URL such that authenticated requests are sent to an attacker controlled server.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2882.json; https://gitlab.com/gitlab-org/gitlab/-/issues/371082; https://hackerone.com/reports/1656722
CVE: CVE-2022-3018
Published: 2022-10-28
Description: An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3018.json; https://gitlab.com/gitlab-org/gitlab/-/issues/360938; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3018.json
CVE: CVE-2021-36858
Published: 2022-10-28
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/super-testimonial/wordpress-testimonials-plugin-2-6-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://wordpress.org/plugins/super-testimonial/; https://patchstack.com/database/vulnerability/super-testimonial/wordpress-testimonials-plugin-2-6-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2021-36863
Published: 2022-10-28
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://wordpress.org/plugins/quiz-master-next/#developers; https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2021-38217
Published: 2022-10-28
Description: SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SEMCMS/blob/main/semcms-1.2-sql-2.md; https://github.com/BigTiger2020/SEMCMS/blob/main/semcms-1.2-sql-2.md
CVE: CVE-2021-38728
Published: 2022-10-28
Description: SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-9.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-9.md
CVE: CVE-2021-38729
Published: 2022-10-28
Description: SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-5.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-5.md
CVE: CVE-2021-38730
Published: 2022-10-28
Description: SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-8.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-8.md
CVE: CVE-2021-38731
Published: 2022-10-28
Description: SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-4.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-4.md
CVE: CVE-2021-38732
Published: 2022-10-28
Description: SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-3.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-3.md
CVE: CVE-2021-38733
Published: 2022-10-28
Description: SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-7.md; https://www.sem-cms.cn/wenda/view-56.html; https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-7.md
CVE: CVE-2022-37424
Published: 2022-10-28
Description: Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-552
References: https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/; https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/
CVE: CVE-2022-37425
Published: 2022-10-28
Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code Inclusion.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-77
References: https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/; https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/
CVE: CVE-2022-37426
Published: 2022-10-28
Description: Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-434
References: https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/; https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/
CVE: CVE-2022-39367
Published: 2022-10-28
Description: QTIWorks is a software suite for standards-based assessment delivery. Prior to version 1.0-beta15, the QTIWorks Engine allows users to upload QTI content packages as ZIP files. The ZIP handling code does not sufficiently check the paths of files contained within ZIP files, so can insert files into other locations in the filesystem if they are writable by the process running the QTIWorks Engine. In extreme cases, this could allow anonymous users to change files in arbitrary locations in the filesystem. In normal QTIWorks Engine deployments, the impact is somewhat reduced because the default QTIWorks configuration does not enable the public demo functionality, so ZIP files can only be uploaded by users with "instructor" privileges. This vulnerability is fixed in version 1.0-beta15. There are no database configuration changes required when upgrading to this version. No known workarounds for this issue exist.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/davemckain/qtiworks/commit/1a46d6d842877ba2b824d5c269845827e2e0ccac; https://github.com/davemckain/qtiworks/pull/81; https://github.com/davemckain/qtiworks/security/advisories/GHSA-xrjg-59rc-4j42
CVE: CVE-2022-3697
Published: 2022-10-28
Description: A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-233
References: https://github.com/ansible-collections/amazon.aws/pull/1199; https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html; https://github.com/ansible-collections/amazon.aws/pull/1199
CVE: CVE-2022-2864
Published: 2022-10-28
Description: The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7. This is due to missing nonce validation in the ~/includes/settings.php file. This makes it possible for unauthenticated attackers to modify the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.8 (HIGH)
References: https://plugins.trac.wordpress.org/browser/demon-image-annotation/trunk/includes/settings.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2772352%40demon-image-annotation&new=2772352%40demon-image-annotation&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2864