deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31497
Published: 2022-06-08
Description: LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/LibreHealthIO/lh-ehr/tags; https://gitlab.com/librehealth/ehr/lh-ehr/-/tags; https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE: CVE-2022-1996
Published: 2022-06-08
Description: Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639, CWE-639
References: https://github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10; https://huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3/
CVE: CVE-2022-30552
Published: 2022-06-08
Description: Das U-Boot 2022.01 has a Buffer Overflow.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/u-boot/u-boot/tags; https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/; https://github.com/u-boot/u-boot/tags
CVE: CVE-2022-30790
Published: 2022-06-08
Description: Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/u-boot/u-boot/tags; https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/; https://github.com/u-boot/u-boot/tags
CVE: CVE-2022-1997
Published: 2022-06-08
Description: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/francoisjacquet/rosariosis/commit/6b22c0b5b40fad891c8cf9e7eeff3e42a35c0bf8; https://huntr.dev/bounties/28861ae9-7b09-45b7-a003-eccf903db71d; https://github.com/francoisjacquet/rosariosis/commit/6b22c0b5b40fad891c8cf9e7eeff3e42a35c0bf8
CVE: CVE-2022-30909
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/3; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/3
CVE: CVE-2022-30910
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/1; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/1
CVE: CVE-2022-30912
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/4; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/4
CVE: CVE-2022-30913
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/7; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/7
CVE: CVE-2022-30914
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/5; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/5
CVE: CVE-2022-30915
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/6; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/6
CVE: CVE-2022-30916
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/9; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/9
CVE: CVE-2022-30917
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/10; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/10
CVE: CVE-2022-30918
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/8; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/8
CVE: CVE-2022-30919
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/13; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/13
CVE: CVE-2022-30920
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/12; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/12
CVE: CVE-2022-30921
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/14; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/14
CVE: CVE-2022-30922
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/11; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/11
CVE: CVE-2022-30923
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/16; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/16
CVE: CVE-2022-30924
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/15; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/15
CVE: CVE-2022-30925
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/17; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/17
CVE: CVE-2022-30926
Published: 2022-06-08
Description: H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/18; https://github.com/EPhaha/IOT_vuln/tree/main/H3C/magicR100/18
CVE: CVE-2020-14125
Published: 2022-06-08
Description: A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-787
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=170; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=170
CVE: CVE-2021-36710
Published: 2022-06-08
Description: ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-668
References: https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc-strikes-back.c; https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc-strikes-back.c
CVE: CVE-2022-24296
Published: 2022-06-08
Description: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://jvn.jp/vu/JVNVU95298925/index.html; https://www.mee.co.jp/psirt/vulnerability/pdf/2022-001.pdf; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-005_en.pdf
CVE: CVE-2022-28382
Published: 2022-06-08
Description: An issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an insecure encryption AES mode (Electronic Codebook, aka ECB), an attacker may be able to extract information even from encrypted data, for example by observing repeating byte patterns. The firmware of the USB-to-SATA bridge controller INIC-3637EN uses AES-256 with the ECB mode. This operation mode of block ciphers (e.g., AES) always encrypts identical plaintext data, in this case blocks of 16 bytes, to identical ciphertext data. For some data, for instance bitmap images, the lack of the cryptographic property called diffusion, within ECB, can leak sensitive information even in encrypted data. Thus, the use of the ECB operation mode can put the confidentiality of specific information at risk, even in an encrypted form. This affects Keypad Secure USB 3.2 Gen 1 Drive Part Number #49428, Store 'n' Go Secure Portable HDD GD25LK01-3637-C VER4.0, Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1, and Fingerprint Secure Portable Hard Drive Part Number #53650.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: http://packetstormsecurity.com/files/167491/Verbatim-Keypad-Secure-USB-3.2-Gen-1-Drive-ECB-Issue.html; http://packetstormsecurity.com/files/167500/Verbatim-Store-N-Go-Secure-Portable-HDD-GD25LK01-3637-C-VER4.0-Risky-Crypto.html; http://packetstormsecurity.com/files/167528/Verbatim-Executive-Fingerprint-Secure-SSD-GDMSFE01-INI3637-C-VER1.1-Risky-Crypto.html
CVE: CVE-2022-28383
Published: 2022-06-08
Description: An issue was discovered in certain Verbatim drives through 2022-03-31. Due to insufficient firmware validation, an attacker can store malicious firmware code for the USB-to-SATA bridge controller on the USB drive (e.g., by leveraging physical access during the supply chain). This code is then executed. This affects Keypad Secure USB 3.2 Gen 1 Drive Part Number #49428, Store 'n' Go Secure Portable HDD GD25LK01-3637-C VER4.0, Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1, and Fingerprint Secure Portable Hard Drive Part Number #53650.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/167482/Verbatim-Keypad-Secure-USB-3.2-Gen-1-Drive-Missing-Control.html; http://packetstormsecurity.com/files/167508/Verbatim-Store-N-Go-Secure-Portable-HDD-GD25LK01-3637-C-VER4.0-Missing-Trust.html; http://packetstormsecurity.com/files/167535/Verbatim-Fingerprint-Secure-Portable-Hard-Drive-53650-Missing-Trust.html
CVE: CVE-2022-28384
Published: 2022-06-08
Description: An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they allow an offline brute-force attack for determining the correct passcode, and thus gaining unauthorized access to the stored encrypted data. This affects Keypad Secure USB 3.2 Gen 1 Drive Part Number #49428 and Store 'n' Go Secure Portable HDD GD25LK01-3637-C VER4.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-307
References: http://packetstormsecurity.com/files/167481/Verbatim-Keypad-Secure-USB-3.2-Gen-1-Drive-Cryptography-Issue.html; http://packetstormsecurity.com/files/167499/Verbatim-Store-N-Go-Secure-Portable-HDD-GD25LK01-3637-C-VER4.0-Risky-Crypto.html; http://seclists.org/fulldisclosure/2022/Jun/17
CVE: CVE-2022-28385
Published: 2022-06-08
Description: An issue was discovered in certain Verbatim drives through 2022-03-31. Due to missing integrity checks, an attacker can manipulate the content of the emulated CD-ROM drive (containing the Windows and macOS client software). The content of this emulated CD-ROM drive is stored as an ISO-9660 image in the hidden sectors of the USB drive, that can only be accessed using special IOCTL commands, or when installing the drive in an external disk enclosure. By manipulating this ISO-9660 image or replacing it with another one, an attacker is able to store malicious software on the emulated CD-ROM drive. This software may get executed by an unsuspecting victim when using the device. For example, an attacker with temporary physical access during the supply chain could program a modified ISO-9660 image on a device that always accepts an attacker-controlled password for unlocking the device. If the attacker later on gains access to the used USB drive, he can simply decrypt all contained user data. Storing arbitrary other malicious software is also possible. This affects Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 and Fingerprint Secure Portable Hard Drive Part Number #53650.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-345
References: http://packetstormsecurity.com/files/167536/Verbatim-Fingerprint-Secure-Portable-Hard-Drive-53650-Insufficient-Verification.html; http://packetstormsecurity.com/files/167546/Verbatim-Executive-Fingerprint-Secure-SSD-GDMSFE01-INI3637-C-VER1.1-Insufficient-Verification.html; http://seclists.org/fulldisclosure/2022/Jun/23
CVE: CVE-2022-28387
Published: 2022-06-08
Description: An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affects Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 and Fingerprint Secure Portable Hard Drive Part Number #53650.
CVSS Score: 4.6 (MEDIUM)
References: http://packetstormsecurity.com/files/167527/Verbatim-Executive-Fingerprint-Secure-SSD-GDMSFE01-INI3637-C-VER1.1-Risky-Crypto.html; http://packetstormsecurity.com/files/167531/Verbatim-Fingerprint-Secure-Portable-Hard-Drive-53650-Risky-Crypto.html; http://seclists.org/fulldisclosure/2022/Jun/13
CVE: CVE-2022-30899
Published: 2022-06-08
Description: A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the 'name' field in /api/part_categories.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/partkeepr/PartKeepr/issues/1240; https://github.com/partkeepr/PartKeepr/issues/1240
CVE: CVE-2022-31325
Published: 2022-06-08
Description: There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/167483/ChurchCRM-4.4.5-SQL-Injection.html; https://github.com/ChurchCRM/CRM/issues/6005; https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325
CVE: CVE-2022-32273
Published: 2022-06-08
Description: As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-203
References: https://docs.opswat.com/mdcore/release-notes; https://opswat.com; https://docs.opswat.com/mdcore/release-notes
CVE: CVE-2022-28386
Published: 2022-06-08
Description: An issue was discovered in certain Verbatim drives through 2022-03-31. The security feature for lockout (e.g., requiring a reformat of the drive after 20 failed unlock attempts) does not work as specified. More than 20 attempts may be made. This affects Keypad Secure USB 3.2 Gen 1 Drive Part Number #49428 and Store 'n' Go Secure Portable HDD GD25LK01-3637-C VER4.0.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-307
References: http://packetstormsecurity.com/files/167492/Verbatim-Keypad-Secure-USB-3.2-Gen-1-Drive-Passcode-Retry.html; http://packetstormsecurity.com/files/167509/Verbatim-Store-N-Go-Secure-Portable-HDD-GD25LK01-3637-C-VER4.0-Behavior-Violation.html; http://seclists.org/fulldisclosure/2022/Jun/11
CVE: CVE-2022-30875
Published: 2022-06-08
Description: Dolibarr 12.0.5 is vulnerable to Cross Site Scripting (XSS) via Sql Error Page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mustgundogdu/Research/edit/main/Dolibar_12.0.5-ReflectedXSS%2C; https://github.com/mustgundogdu/Research/edit/main/Dolibar_12.0.5-ReflectedXSS/README.md; https://github.com/mustgundogdu/Research/edit/main/Dolibar_12.0.5-ReflectedXSS%2C
CVE: CVE-2021-40589
Published: 2022-06-08
Description: ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://sourceforge.net/p/zangband/bugs/671/; https://sourceforge.net/p/zangband/bugs/671/
CVE: CVE-2021-40592
Published: 2022-06-08
Description: GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vulnerability in ISOBMFF reader filter, isoffin_read.c. Function isoffin_process() can result in DoS by infinite loop. To exploit, the victim must open a specially crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/gpac/gpac/commit/71460d72ec07df766dab0a4d52687529f3efcf0a; https://github.com/gpac/gpac/issues/1876; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2022-30877
Published: 2022-06-08
Description: The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/OrkoHunter/keep/issues/85; https://pypi.org/project/keep
CVE: CVE-2022-30882
Published: 2022-06-08
Description: pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code (remote). When installing the pyanxdns package of version 0.2, the request package will be installed.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/egeback/pyanxdns/issues/1; https://pypi.org/project/pyanxdns/
CVE: CVE-2022-31313
Published: 2022-06-08
Description: api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
CVSS Score: 9.8 (CRITICAL)
References: http://pypi.doubanio.com/simple/request; https://github.com/rakeshrkz7/as_api_res/issues/1; https://pypi.org/project/api-res-py/
CVE: CVE-2022-29013
Published: 2022-06-09
Description: A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://packetstormsecurity.com/files/166684/Razer-Sila-2.0.418-Command-Injection.html; https://www.exploit-db.com/exploits/50865; https://www2.razer.com/ap-en/desktops-and-networking/razer-sila
CVE: CVE-2022-29014
Published: 2022-06-09
Description: A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files.
CVSS Score: 7.5 (HIGH)
References: https://packetstormsecurity.com/files/166683/Razer-Sila-2.0.418-Local-File-Inclusion.html; https://www.exploit-db.com/exploits/50864; https://www2.razer.com/ap-en/desktops-and-networking/razer-sila
CVE: CVE-2022-31496
Published: 2022-06-09
Description: LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
CVSS Score: 8.8 (HIGH)
References: https://github.com/LibreHealthIO/lh-ehr/tags; https://gitlab.com/librehealth/ehr/lh-ehr/-/tags; https://nitroteam.kz/index.php?action=researches&slug=librehealth2_r
CVE: CVE-2022-24840
Published: 2022-06-09
Description: django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the `AWS_LOCATION` setting was set, traversal was limited to that location only. The issue was discovered by the maintainer. There were no reports of the vulnerability being known to or exploited by a third party, prior to the release of the patch. The vulnerability has been fixed in version 5.5.1 and above. There is no feasible workaround. We must urge all users to immediately updated to a patched version.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/codingjoe/django-s3file/commit/68ccd2c621a40eb66fdd6af2be9d5fcc9c373318; https://github.com/codingjoe/django-s3file/security/advisories/GHSA-4w8f-hjm9-xwgf; https://github.com/codingjoe/django-s3file/commit/68ccd2c621a40eb66fdd6af2be9d5fcc9c373318
CVE: CVE-2022-25804
Published: 2022-06-09
Description: An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. Insecure permissions for the serverconfig registry key (under JavaSoft\Prefs\de\igel\rm\config in HKEY_LOCAL_MACHINE\SOFTWARE) allow an unprivileged local attacker to read the encrypted dbuser and dbpassword values for the UMS superuser.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0002.md; https://www.igel.com/igel-solution-family/universal-management-suite/; https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0002.md