deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-40105
Published: 2022-09-23
Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterGet.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterGet.md
CVE: CVE-2022-40106
Published: 2022-09-23
Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set_local_time function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_set_local_time.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_set_local_time.md
CVE: CVE-2022-40107
Published: 2022-09-23
Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formexeCommand.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formexeCommand.md
CVE: CVE-2022-40132
Published: 2022-09-23
Description: Cross-Site Request Forgery (CSRF) vulnerability in Seriously Simple Podcasting plugin <= 2.16.0 at WordPress, leading to plugin settings change.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/seriously-simple-podcasting/wordpress-seriously-simple-podcasting-plugin-2-16-0-cross-site-request-forgery-csrf-vulnerability/_s_id=cve; https://wordpress.org/plugins/seriously-simple-podcasting/#developers; https://patchstack.com/database/vulnerability/seriously-simple-podcasting/wordpress-seriously-simple-podcasting-plugin-2-16-0-cross-site-request-forgery-csrf-vulnerability/_s_id=cve
CVE: CVE-2022-40630
Published: 2022-09-23
Description: This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform session fixation on the targeted device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384, CWE-384
References: https://tacitine.com/newdownload/CVE-2022-40630.pdf; https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0363; https://tacitine.com/newdownload/CVE-2022-40630.pdf
CVE: CVE-2022-22629
Published: 2022-09-23
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-32814
Published: 2022-09-23
Description: A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-40665
Published: 2022-09-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none
CVE: CVE-2022-40666
Published: 2022-09-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none
CVE: CVE-2022-40667
Published: 2022-09-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none
CVE: CVE-2022-40668
Published: 2022-09-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none
CVE: CVE-2022-40669
Published: 2022-09-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none
CVE: CVE-2022-3278
Published: 2022-09-23
Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/vim/vim/commit/69082916c8b5d321545d60b9f5facad0a2dd5a4e; https://huntr.dev/bounties/a9fad77e-f245-4ce9-ba15-c7d4c86c4612; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/
CVE: CVE-2022-40113
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection3.md; https://github.com/zakee94/online-banking-system/issues/18; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection3.md
CVE: CVE-2022-40114
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection5.md; https://github.com/zakee94/online-banking-system/issues/16; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection5.md
CVE: CVE-2022-40115
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_beneficiary.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection1.md; https://github.com/zakee94/online-banking-system/issues/10; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection1.md
CVE: CVE-2022-40116
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection9.md; https://github.com/zakee94/online-banking-system/issues/13; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection9.md
CVE: CVE-2022-40117
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_customer.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection2.md; https://github.com/zakee94/online-banking-system/issues/17; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection2.md
CVE: CVE-2022-40118
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds_action.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection4.md; https://github.com/zakee94/online-banking-system/issues/19; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection4.md
CVE: CVE-2022-40119
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net-banking/transactions.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection6.md; https://github.com/zakee94/online-banking-system/issues/11; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection6.md
CVE: CVE-2022-40120
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net-banking/customer_transactions.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection7.md; https://github.com/zakee94/online-banking-system/issues/14; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection7.md
CVE: CVE-2022-40121
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/manage_customers.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection8.md; https://github.com/zakee94/online-banking-system/issues/12; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection8.md
CVE: CVE-2022-40122
Published: 2022-09-23
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer_action.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection10.md; https://github.com/zakee94/online-banking-system/issues/15; https://github.com/0clickjacking0/BugReport/blob/main/online-banking-system/sql_injection10.md
CVE: CVE-2022-36025
Published: 2022-09-24
Description: Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An error in 32 bit signed and unsigned types in the calculation of available gas in the CALL operations (including DELEGATECALL) results in incorrect gas being passed into called contracts and incorrect gas being returned after call execution. Where the amount of gas makes a difference in the success or failure, or if the gas is a negative 64 bit value, the execution will result in a different state root than expected, resulting in a consensus failure in networks with multiple EVM implementations. In networks with a single EVM implementation this can be used to execute with significantly more gas than then transaction requested, possibly exceeding gas limitations. This issue is patched in version 22.7.1. As a workaround, reverting to version 22.1.3 or earlier will prevent incorrect execution.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-196, CWE-681, CWE-681
References: https://github.com/hyperledger/besu/security/advisories/GHSA-4456-w38r-m53x; https://github.com/hyperledger/besu/security/advisories/GHSA-4456-w38r-m53x
CVE: CVE-2022-39240
Published: 2022-09-24
Description: MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://github.com/renlm/MyGraph/security/advisories/GHSA-hj4j-923h-927j; https://github.com/renlm/MyGraph/security/advisories/GHSA-hj4j-923h-927j
CVE: CVE-2022-39242
Published: 2022-09-24
Description: Frontier is an Ethereum compatibility layer for Substrate. Prior to commit d3beddc6911a559a3ecc9b3f08e153dbe37a8658, the worst case weight was always accounted as the block weight for all cases. In case of large EVM gas refunds, this can lead to block spamming attacks -- the adversary can construct blocks with transactions that have large amount of refunds or unused gases with reverts, and as a result inflate up the chain gas prices. The impact of this issue is limited in that the spamming attack would still be costly for any adversary, and it has no ability to alter any chain state. This issue has been patched in commit d3beddc6911a559a3ecc9b3f08e153dbe37a8658. There are no known workarounds.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-682, CWE-682
References: https://github.com/paritytech/frontier/pull/851; https://github.com/paritytech/frontier/security/advisories/GHSA-v57h-6hmh-g2p4; https://github.com/paritytech/frontier/pull/851
CVE: CVE-2022-23461
Published: 2022-09-24
Description: Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit/; https://securitylab.github.com/advisories/GHSL-2022-030_xdan_jodit/
CVE: CVE-2022-23463
Published: 2022-09-24
Description: Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact with Java classes such as java.lang.Runtime, leading to Remote Code Execution. There is no patch available for this issue at time of publication. There are no known workarounds.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-917
References: https://securitylab.github.com/advisories/GHSL-2022-033_GHSL-2022-034_Discovery/; https://securitylab.github.com/advisories/GHSL-2022-033_GHSL-2022-034_Discovery/
CVE: CVE-2022-23464
Published: 2022-09-24
Description: Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially resulting in Information Disclosure. There is no patch available for this issue at time of publication. There are no known workarounds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://securitylab.github.com/advisories/GHSL-2022-033_GHSL-2022-034_Discovery/; https://securitylab.github.com/advisories/GHSL-2022-033_GHSL-2022-034_Discovery/
CVE: CVE-2022-41340
Published: 2022-09-24
Description: The secp256k1-js package before 1.1.0 for Node.js implements ECDSA without required r and s validation, leading to signature forgery.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347, CWE-347
References: https://github.com/lionello/secp256k1-js/commit/302800f0370b42e360a33774bb808274ac729c2e; https://github.com/lionello/secp256k1-js/compare/1.0.1...1.1.0; https://github.com/lionello/secp256k1-js/issues/11
CVE: CVE-2022-3296
Published: 2022-09-25
Description: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/vim/vim/commit/96b9bf8f74af8abf1e30054f996708db7dc285be; https://huntr.dev/bounties/958866b8-526a-4979-9471-39392e0c9077; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/
CVE: CVE-2022-3297
Published: 2022-09-25
Description: Use After Free in GitHub repository vim/vim prior to 9.0.0579.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/vim/vim/commit/0ff01835a40f549c5c4a550502f62a2ac9ac447c; https://huntr.dev/bounties/1aa9ec92-0355-4710-bf85-5bce9effa01c; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/
CVE: CVE-2022-41343
Published: 2022-09-25
Description: registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: https://github.com/dompdf/dompdf/issues/2994; https://github.com/dompdf/dompdf/pull/2995; https://github.com/dompdf/dompdf/releases/tag/v2.0.1
CVE: CVE-2022-41347
Published: 2022-09-26
Description: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo configuration permits the zimbra user to execute the NGINX binary as root with arbitrary parameters. As part of its intended functionality, NGINX can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.
CVSS Score: 7.8 (HIGH)
References: https://darrenmartyn.ie/2021/10/25/zimbra-nginx-local-root-exploit/; https://github.com/darrenmartyn/zimbra-hinginx; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2022-41352
Published: 2022-09-26
Description: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html; https://forums.zimbra.org/viewtopic.php?t=71153&p=306532; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2022-21169
Published: 2022-09-26
Description: The package express-xss-sanitizer before 1.1.3 are vulnerable to Prototype Pollution via the allowedTags attribute, allowing the attacker to bypass xss sanitization.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321, CWE-1321
References: https://github.com/AhmedAdelFahim/express-xss-sanitizer/commit/3bf8aaaf4dbb1c209dcb8d87a82711a54c1ab39a; https://github.com/AhmedAdelFahim/express-xss-sanitizer/issues/4; https://runkit.com/embed/w306l6zfm7tu
CVE: CVE-2022-21797
Published: 2022-09-26
Description: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://github.com/joblib/joblib/commit/b90f10efeb670a2cc877fb88ebb3f2019189e059; https://github.com/joblib/joblib/issues/1128; https://github.com/joblib/joblib/pull/1321
CVE: CVE-2022-38553
Published: 2022-09-26
Description: Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://academy.com; https://codecanyon.net/item/academy-course-based-learning-management-system/22703468; https://demo.creativeitem.com/academy/home/
CVE: CVE-2022-36158
Published: 2022-09-26
Description: Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page (/usr/www/ja/mnt_cmd.cgi).
CVSS Score: 8.0 (HIGH)
CWE: CWE-425, CWE-425
References: https://gist.github.com/Nwqda/aac33d1936d2b514a3268f145345abb4; https://jvn.jp/en/vu/JVNVU98305100/; https://samy.link/blog/contec-flexlan-fxa2000-and-fxa3000-series-vulnerability-repo
CVE: CVE-2022-36159
Published: 2022-09-26
Description: Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. As the password strength is weak, it can be cracked in few minutes. Through this credential, a malicious actor can access the Wireless LAN Manager interface and open the telnet port then sniff the traffic or inject any malware.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798, CWE-798
References: https://gist.github.com/Nwqda/aac33d1936d2b514a3268f145345abb4; https://jvn.jp/en/vu/JVNVU98305100/; https://samy.link/blog/contec-flexlan-fxa2000-and-fxa3000-series-vulnerability-repo
CVE: CVE-2022-38970
Published: 2022-09-26
Description: ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-330, CWE-330
References: https://www.realinfosec.net/cybersecurity-news/iegeek-vulnerabilities-still-prevalent-in-2022-amazon-ft-ig20/; https://www.realinfosec.net/cybersecurity-news/iegeek-vulnerabilities-still-prevalent-in-2022-amazon-ft-ig20/
CVE: CVE-2022-3301
Published: 2022-09-26
Description: Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVSS Score: 2.4 (LOW)
CWE: CWE-460
References: https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e; https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a; https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e
CVE: CVE-2021-24890
Published: 2022-09-26
Description: The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-862
References: https://dplugins.com/products/scripts-organizer/; https://wpscan.com/vulnerability/f3b450d2-84ce-4c13-ad6a-b60785dee7e7; https://dplugins.com/products/scripts-organizer/
CVE: CVE-2022-1613
Published: 2022-09-26
Description: The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://wpscan.com/vulnerability/c03863ef-9ac9-402b-8f8d-9559c9988e2b; https://wpscan.com/vulnerability/c03863ef-9ac9-402b-8f8d-9559c9988e2b
CVE: CVE-2022-1755
Published: 2022-09-26
Description: The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/62b2548e-6b59-48b8-b1c2-9bd47e634982; https://wpscan.com/vulnerability/62b2548e-6b59-48b8-b1c2-9bd47e634982
CVE: CVE-2022-2352
Published: 2022-09-26
Description: The Post SMTP Mailer/Email Log WordPress plugin before 2.1.7 does not have proper authorisation in some AJAX actions, which could allow high privilege users such as admin to perform blind SSRF on multisite installations for example.
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://wpscan.com/vulnerability/dc99ac40-646a-4f8e-b2b9-dc55d6d4c55c; https://wpscan.com/vulnerability/dc99ac40-646a-4f8e-b2b9-dc55d6d4c55c