deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-3252
Published: 2022-09-21
Description: Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects (HTTPRequestDecompressor and HTTPResponseDecompressor) both failed to detect when the decompressed body was considered complete. If trailing junk data was appended to the HTTP message body, the code would repeatedly attempt to decompress this data and fail. This would lead to an infinite loop making no forward progress, leading to livelock of the system and denial-of-service. This issue can be triggered by any attacker capable of sending a compressed HTTP message. Most commonly this is HTTP servers, as compressed HTTP messages cannot be negotiated for HTTP requests, but it is possible that users have configured decompression for HTTP requests as well. The attack is low effort, and likely to be reached without requiring any privilege or system access. The impact on availability is high: the process immediately becomes unavailable but does not immediately crash, meaning that it is possible for the process to remain in this state until an administrator intervenes or an automated circuit breaker fires. If left unchecked this issue will very slowly exhaust memory resources due to repeated buffer allocation, but the buffers are not written to and so it is possible that the processes will not terminate for quite some time. This risk can be mitigated by removing transparent HTTP message decompression. The issue is fixed by correctly detecting the termination of the compressed body as reported by zlib and refusing to decompress further data. The issue was found by Vojtech Rylko (https://github.com/vojtarylko) and reported publicly on GitHub.
CVSS Score: 7.5 (HIGH)
CWE: CWE-606, CWE-835
References: https://github.com/apple/swift-nio-extras/security/advisories/GHSA-773g-x274-8qmf; https://github.com/apple/swift-nio-extras/security/advisories/GHSA-773g-x274-8qmf
CVE: CVE-2022-40219
Published: 2022-09-21
Description: Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/favicon-switcher/wordpress-favicon-switcher-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability; https://wordpress.org/plugins/favicon-switcher/; https://patchstack.com/database/vulnerability/favicon-switcher/wordpress-favicon-switcher-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability
CVE: CVE-2022-28802
Published: 2022-09-21
Description: Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. In other words, Code by Zapier was providing a customer-controlled general-purpose virtual machine that unintentionally granted full access to all users of a company's account, but was supposed to enforce role-based access control within that company's account. Before 2022-08-17, a customer could have resolved this by (in effect) using a separate virtual machine for an application that held credentials - or other secrets - that weren't supposed to be shared among all of its employees. (Multiple accounts would have been needed to operate these independent virtual machines.)
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-732, CWE-732
References: https://www.zenity.io/blog/zapescape-organization-wide-control-over-code-by-zapier/; https://www.zenity.io/blog/zapescape-vulnerability-disclosure/; https://www.zenity.io/blog/zapescape-organization-wide-control-over-code-by-zapier/
CVE: CVE-2022-36365
Published: 2022-09-21
Description: Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Crossword plugin <= 1.1.10 at WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wha-crossword/wordpress-wha-crossword-plugin-1-1-10-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities; https://wordpress.org/plugins/wha-crossword/; https://patchstack.com/database/vulnerability/wha-crossword/wordpress-wha-crossword-plugin-1-1-10-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
CVE: CVE-2022-36383
Published: 2022-09-21
Description: Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Word Search Puzzles game plugin <= 2.0.1 at WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wha-wordsearch/wordpress-word-search-puzzles-game-plugin-2-0-1-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities; https://wordpress.org/plugins/wha-wordsearch/; https://patchstack.com/database/vulnerability/wha-wordsearch/wordpress-word-search-puzzles-game-plugin-2-0-1-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
CVE: CVE-2022-36386
Published: 2022-09-21
Description: Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434, CWE-94, CWE-434
References: https://patchstack.com/database/vulnerability/wp-all-import/wordpress-import-any-xml-or-csv-file-to-wordpress-plugin-3-6-7-authenticated-arbitrary-code-execution-vulnerability; https://wordpress.org/plugins/wp-all-import/#developers; https://patchstack.com/database/vulnerability/wp-all-import/wordpress-import-any-xml-or-csv-file-to-wordpress-plugin-3-6-7-authenticated-arbitrary-code-execution-vulnerability
CVE: CVE-2022-36390
Published: 2022-09-21
Description: Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/calendar-event/wordpress-event-calendar-calendar-plugin-1-4-6-authenticated-reflected-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/calendar-event/#developers; https://patchstack.com/database/vulnerability/calendar-event/wordpress-event-calendar-calendar-plugin-1-4-6-authenticated-reflected-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-38073
Published: 2022-09-21
Description: Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Support plugin <= 6.0.7 at WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-7-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities; https://wordpress.org/plugins/awesome-support/#developers; https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-7-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
CVE: CVE-2022-3233
Published: 2022-09-21
Description: Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca; https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3; https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca
CVE: CVE-2022-40217
Published: 2022-09-21
Description: Authenticated (admin+) Arbitrary File Edit/Upload vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://patchstack.com/database/vulnerability/wpide/wordpress-wpide-plugin-2-6-authenticated-arbitrary-file-edit-upload-vulnerability; https://wordpress.org/plugins/wpide/#developers; https://patchstack.com/database/vulnerability/wpide/wordpress-wpide-plugin-2-6-authenticated-arbitrary-file-edit-upload-vulnerability
CVE: CVE-2022-35895
Published: 2022-09-21
Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a software SMI routine, leading to memory corruption of arbitrary addresses including SMRAM, and possible arbitrary code execution.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://binarly.io/advisories/BRLY-2022-024/index.html; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022033
CVE: CVE-2022-39224
Published: 2022-09-21
Description: Arr-pm is an RPM reader/writer library written in Ruby. Versions prior to 0.0.12 are subject to OS command injection resulting in shell execution if the RPM contains a malicious "payload compressor" field. This vulnerability impacts the `extract` and `files` methods of the `RPM::File` class of this library. Version 0.0.12 patches these issues. A workaround for this issue is to ensure any RPMs being processed contain valid/known payload compressor values such as gzip, bzip2, xz, zstd, and lzma. The payload compressor field in an rpm can be checked by using the rpm command line tool.
CVSS Score: 7.0 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/jordansissel/ruby-arr-pm/pull/14; https://github.com/jordansissel/ruby-arr-pm/pull/15; https://github.com/jordansissel/ruby-arr-pm/security/advisories/GHSA-88cv-mj24-8w3q
CVE: CVE-2022-28978
Published: 2022-09-22
Description: Stored cross-site scripting (XSS) vulnerability in the Site module's user membership administration page in Liferay Portal 7.0.1 through 7.4.1, and Liferay DXP 7.0 before fix pack 102, 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the a user's name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28978-stored-xss-with-user-name-in-site-membership; http://liferay.com
CVE: CVE-2022-28979
Published: 2022-09-22
Description: Liferay Portal v7.1.0 through v7.4.2 and Liferay DXP 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 was discovered to contain a cross-site scripting (XSS) vulnerability in the Portal Search module's Custom Facet widget. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Parameter Name text field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://liferay.com; https://issues.liferay.com/browse/LPE-17381; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28979-xss-in-custom-facet-widget
CVE: CVE-2022-28982
Published: 2022-09-22
Description: A cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name of a tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28982-reflected-xss-with-tag-name-in-%253Cliferay-asset-asset-tags-selector%253E; http://liferay.com
CVE: CVE-2022-35896
Published: 2022-09-22
Description: An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://binarly.io/advisories/BRLY-2022-025/index.html; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022034
CVE: CVE-2022-39975
Published: 2022-09-22
Description: The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a "Content Page" type page, allowing attackers to view unpublished "Content Page" pages via URL manipulation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-39975; http://liferay.com
CVE: CVE-2022-28977
Published: 2022-09-22
Description: HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 fix pack 91 through 101, 7.1 fix pack 17 through 25, 7.2 fix pack 5 through 14, and 7.3 before service pack 3 can be circumvented by using multiple forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28977-htmlutil.escaperedirect-circumvention-with-multiple-forward-slash; http://liferay.com
CVE: CVE-2022-28980
Published: 2022-09-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal v7.4.3.4 and Liferay DXP v7.4 GA allows attackers to execute arbitrary web scripts or HTML via parameters with the filter_ prefix.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28980-reflected-xss-with-filter_%2A-parameters-in-applied-fragment-filters; http://liferay.com
CVE: CVE-2022-28981
Published: 2022-09-22
Description: Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28981-path-traversal-vulnerability-in-hypermedia-rest-apis; http://liferay.com
CVE: CVE-2022-38512
Published: 2022-09-22
Description: The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36, and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page's XLIFF translation file via crafted URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-38512; http://liferay.com
CVE: CVE-2022-39197
Published: 2022-09-22
Description: An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the payload (or create a new payload with the extracted information and then modify that username field to be malformed).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-1/; https://www.cobaltstrike.com/blog/tag/release/; https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-1/
CVE: CVE-2022-40186
Published: 2022-09-22
Description: An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an entity has multiple mount accessors with shared alias names, Vault may overwrite metadata to the wrong alias due to an issue with checking the proper alias assigned to an entity. This may allow for unintended access to key/value paths using that metadata in Vault.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639
References: https://discuss.hashicorp.com; https://discuss.hashicorp.com/t/hcsec-2022-18-vault-entity-alias-metadata-may-leak-between-aliases-with-the-same-name-assigned-to-the-same-entity/44550; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-2266
Published: 2022-09-22
Description: University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.usom.gov.tr/bildirim/tr-22-0637; https://www.usom.gov.tr/bildirim/tr-22-0637
CVE: CVE-2022-40705
Published: 2022-09-22
Description: An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP. This issue affects Apache SOAP version 2.2 and later versions. It is unknown whether previous versions are also affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: http://www.openwall.com/lists/oss-security/2022/09/22/1; https://lists.apache.org/thread/02yo04w93rdjmllz4454lvodn5xzhwhl; http://www.openwall.com/lists/oss-security/2022/09/22/1
CVE: CVE-2022-3267
Published: 2022-09-22
Description: Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314; https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2; https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314
CVE: CVE-2022-3268
Published: 2022-09-22
Description: Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://github.com/ikus060/minarca/commit/7b5c7e6cbd59268d5cd4f1b5f42e721db116f71a; https://huntr.dev/bounties/00e464ce-53b9-485d-ac62[PII_REDACTED]c2; https://github.com/ikus060/minarca/commit/7b5c7e6cbd59268d5cd4f1b5f42e721db116f71a
CVE: CVE-2022-3256
Published: 2022-09-22
Description: Use After Free in GitHub repository vim/vim prior to 9.0.0530.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/vim/vim/commit/8ecfa2c56b4992c7f067b92488aa9acea5a454ad; https://huntr.dev/bounties/8336a3df-212a-4f8d-ae34-76ef1f936bb3; https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html
CVE: CVE-2022-40443
Published: 2022-09-22
Description: An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/liong007/ZZCMS/issues/1; https://github.com/liong007/ZZCMS/issues/1
CVE: CVE-2022-40444
Published: 2022-09-22
Description: ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/liong007/ZZCMS/issues/2; https://github.com/liong007/ZZCMS/issues/2
CVE: CVE-2022-40446
Published: 2022-09-22
Description: ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/liong007/ZZCMS/issues/4; https://github.com/liong007/ZZCMS/issues/4
CVE: CVE-2022-40447
Published: 2022-09-22
Description: ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/liong007/ZZCMS/issues/5; https://github.com/liong007/ZZCMS/issues/5
CVE: CVE-2022-1941
Published: 2022-09-22
Description: A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of memory failures. A specially crafted message with multiple key-value per elements creates parsing issues, and can lead to a Denial of Service against services receiving unsanitized input. We recommend upgrading to versions 3.18.3, 3.19.5, 3.20.2, 3.21.6 for protobuf-cpp and 3.18.3, 3.19.5, 3.20.2, 4.21.6 for protobuf-python. Versions for 3.16 and 3.17 are no longer updated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1286
References: http://www.openwall.com/lists/oss-security/2022/09/27/1; https://cloud.google.com/support/bulletins#GCP-2022-019; https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-8gq9-2x98-w8hf
CVE: CVE-2022-38398
Published: 2022-09-22
Description: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://lists.apache.org/thread/712c9xwtmyghyokzrm2ml6sps4xlmbsx; https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html; https://security.gentoo.org/glsa/202401-11
CVE: CVE-2022-38648
Published: 2022-09-22
Description: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://lists.apache.org/thread/gfsktxvj7jtwyovmhhbrw0bs13wfjd7b; https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html; https://security.gentoo.org/glsa/202401-11
CVE: CVE-2022-40146
Published: 2022-09-22
Description: Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://lists.apache.org/thread/hxtddqjty2sbs12y97c8g7xfh17jzxsx; https://lists.debian.org/debian-lts-announce/2023/10/msg00021.html; https://security.gentoo.org/glsa/202401-11
CVE: CVE-2022-35408
Published: 2022-09-22
Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. An attacker could overwrite the function pointers in the EFI_BOOT_SERVICES table before the USB SMI handler triggers. (This is not exploitable from code running in the operating system.)
CVSS Score: 8.2 (HIGH)
CWE: CWE-123
References: https://binarly.io/advisories/BRLY-2022-022/index.html; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022031
CVE: CVE-2022-40932
Published: 2022-09-22
Description: In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/lime-10010/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-1.md; https://github.com/lime-10010/Bug_report/blob/main/vendors/pushpam02/zoo-management-system/RCE-1.md
CVE: CVE-2021-39190
Published: 2022-09-22
Description: The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://github.com/pluginsGLPI/sccm/commit/29a7f92d32a0cf9aa3f22c52c50b738274d2813e; https://github.com/pluginsGLPI/sccm/security/advisories/GHSA-3324-57w6-jxcq; https://github.com/pluginsGLPI/sccm/commit/29a7f92d32a0cf9aa3f22c52c50b738274d2813e