deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-44583
Published: 2022-11-18
Description: Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: https://patchstack.com/database/vulnerability/watchtowerhq/wordpress-watchtowerhq-plugin-3-6-15-unauth-arbitrary-file-download-vulnerability?_s_id=cve; https://wordpress.org/plugins/watchtowerhq/#developers; https://patchstack.com/database/vulnerability/watchtowerhq/wordpress-watchtowerhq-plugin-3-6-15-unauth-arbitrary-file-download-vulnerability?_s_id=cve
CVE: CVE-2022-44584
Published: 2022-11-18
Description: Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.
CVSS Score: 9.1 (CRITICAL)
References: https://patchstack.com/database/vulnerability/watchtowerhq/wordpress-watchtowerhq-plugin-3-6-15-unauth-arbitrary-file-deletion-vulnerability?_s_id=cve; https://wordpress.org/plugins/watchtowerhq/#developers; https://patchstack.com/database/vulnerability/watchtowerhq/wordpress-watchtowerhq-plugin-3-6-15-unauth-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE: CVE-2022-44634
Published: 2022-11-18
Description: Auth. (admin+) Arbitrary File Read vulnerability in S2W – Import Shopify to WooCommerce plugin <= 1.1.12 on WordPress.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-552
References: https://patchstack.com/database/vulnerability/import-shopify-to-woocommerce/wordpress-s2w-import-shopify-to-woocommerce-plugin-1-1-12-auth-local-file-inclusion-lfi-vulnerability?_s_id=cve; https://wordpress.org/plugins/import-shopify-to-woocommerce/#developers; https://patchstack.com/database/vulnerability/import-shopify-to-woocommerce/wordpress-s2w-import-shopify-to-woocommerce-plugin-1-1-12-auth-local-file-inclusion-lfi-vulnerability?_s_id=cve
CVE: CVE-2022-44740
Published: 2022-11-18
Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Creative Mail plugin <= 1.5.4 on WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/creative-mail-by-constant-contact/wordpress-creative-mail-plugin-1-5-4-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve; https://wordpress.org/plugins/creative-mail-by-constant-contact/#developers; https://patchstack.com/database/vulnerability/creative-mail-by-constant-contact/wordpress-creative-mail-plugin-1-5-4-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve
CVE: CVE-2022-45073
Published: 2022-11-18
Description: Cross-Site Request Forgery (CSRF) vulnerability in REST API Authentication plugin <= 2.4.0 on WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/wp-rest-api-authentication/wordpress-rest-api-authentication-plugin-2-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-rest-api-authentication/wordpress-rest-api-authentication-plugin-2-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2022-45082
Published: 2022-11-18
Description: Multiple Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilities in Accordions plugin <= 2.0.3 on WordPress via &addons-style-name and &accordions_or_faqs_license_key.
CVSS Score: 3.4 (LOW)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-plugin-2-0-3-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve; https://wordpress.org/plugins/accordions-or-faqs/#developers; https://patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-plugin-2-0-3-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve
CVE: CVE-2022-45132
Published: 2022-11-18
Description: In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API endpoint for validating device configuration files in lava-server loads input as a Jinja2 template in a way that can be used to trigger remote code execution in the LAVA server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://lists.lavasoftware.org/archives/list/lava-announce%40lists.lavasoftware.org/thread/WHXGQMIZAPW3GCQEXYHC32N2ZAAAIYCY/; https://podalirius.net/en/articles/python-vulnerabilities-code-execution-in-jinja-templates/; https://lists.lavasoftware.org/archives/list/lava-announce%40lists.lavasoftware.org/thread/WHXGQMIZAPW3GCQEXYHC32N2ZAAAIYCY/
CVE: CVE-2022-45163
Published: 2022-11-18
Description: An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://nxp.com; https://research.nccgroup.com/2022/11/17/cve-2022-45163/; https://research.nccgroup.com/category/technical-advisory/
CVE: CVE-2022-45369
Published: 2022-11-18
Description: Auth. (subscriber+) Broken Access Control vulnerability in Plugin for Google Reviews plugin <= 2.2.2 on WordPress.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: https://patchstack.com/database/vulnerability/widget-google-reviews/wordpress-plugin-for-google-reviews-plugin-2-2-2-auth-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/widget-google-reviews/wordpress-plugin-for-google-reviews-plugin-2-2-2-auth-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2022-30256
Published: 2022-11-19
Description: An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and highly impactful, because the exploitation conforms to de facto DNS specifications and operational practices, and overcomes current mitigation patches for "Ghost" domain names.
CVSS Score: 7.5 (HIGH)
CWE: CWE-672, CWE-672
References: https://lists.debian.org/debian-lts-announce/2023/06/msg00019.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3VSMLJX25MXGQ6A7UPOGK7VPUVDESPHL/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NB7LDZM5AGWC5BHHQHW6CP5OFNBBKFOQ/
CVE: CVE-2022-31606
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabilities to cause an out-of-bounds access in kernel mode, which could lead to denial of service, information disclosure, escalation of privileges, or data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31607
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31608
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281, CWE-281
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31610
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31612
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal kernel information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31613
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer dereference, which may lead to a kernel panic.
CVSS Score: 7.1 (HIGH)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31615
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31616
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to denial of service, or information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31617
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds read, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-34665
Published: 2022-11-19
Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-34667
Published: 2022-11-19
Description: NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which may lead to a limited denial of service and some loss of data integrity for the local user.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5373; https://nvidia.custhelp.com/app/answers/detail/a_id/5373
CVE: CVE-2022-41155
Published: 2022-11-19
Description: Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://patchstack.com/database/vulnerability/iq-block-country/wordpress-iq-block-country-plugin-1-2-18-block-bypass-vulnerability?_s_id=cve; https://wordpress.org/plugins/iq-block-country/#developers; https://patchstack.com/database/vulnerability/iq-block-country/wordpress-iq-block-country-plugin-1-2-18-block-bypass-vulnerability?_s_id=cve
CVE: CVE-2022-41609
Published: 2022-11-19
Description: Auth. (subscriber+) Server-Side Request Forgery (SSRF) vulnerability in Better Messages plugin 1.9.10.68 on WordPress.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://patchstack.com/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-68-server-side-request-forgery-ssrf-vulnerability?_s_id=cve; https://wordpress.org/plugins/bp-better-messages/#developers; https://patchstack.com/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-68-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE: CVE-2022-4055
Published: 2022-11-19
Description: When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
CVSS Score: 7.4 (HIGH)
CWE: CWE-146
References: https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/205#note_1494267; https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/205#note_1494267
CVE: CVE-2022-41938
Published: 2022-11-19
Description: Flarum is an open source discussion platform. Flarum's page title system allowed for page titles to be converted into HTML DOM nodes when pages were rendered. The change was made after `v1.5` and was not noticed. This allowed an attacker to inject malicious HTML markup using a discussion title input, either by creating a new discussion or renaming one. The XSS attack occurs after a visitor opens the relevant discussion page. All communities running Flarum from `v1.5.0` to `v1.6.1` are impacted. The vulnerability has been fixed and published as flarum/core `v1.6.2`. All communities running Flarum from `v1.5.0` to `v1.6.1` have to upgrade as soon as possible to v1.6.2. There are no known workarounds for this issue.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://discuss.flarum.org/d/27558; https://github.com/flarum/framework/commit/690de9ce0ffe7ac4d45b73e303f44340c3433138; https://github.com/flarum/framework/security/advisories/GHSA-7x4w-j98p-854x
CVE: CVE-2022-41939
Published: 2022-11-19
Description: knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose their registry credentials or local docker socket to a malicious `lifecycle` container. This issues has been patched in PR #1442, and is part of release 1.8.1. This issue only affects users who are using function buildpacks from third-parties; pinning the builder image to a specific content-hash with a valid `lifecycle` image will also mitigate the attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-200
References: https://github.com/knative/func/blob/5ca77d38744d3481cc0b795f607c5859b19588fc/buildpacks/builder.go#L37-L41; https://github.com/knative/func/pull/1442; https://github.com/knative/func/releases/tag/knative-v1.8.1
CVE: CVE-2022-4064
Published: 2022-11-19
Description: A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.3 is able to address this issue. The patch is identified as 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to upgrade the affected component.
CVSS Score: 3.7 (LOW)
CWE: CWE-74, CWE-707, CWE-74
References: https://github.com/advisories/GHSA-3xg8-cc8f-9wv2; https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d; https://github.com/petergoldstein/dalli/issues/932
CVE: CVE-2022-4065
Published: 2022-11-19
Description: A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e[PII_REDACTED]f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/cbeust/testng/commit/9150736cd2c123a6a3b60e[PII_REDACTED]f9f0422b; https://github.com/cbeust/testng/pull/2806; https://github.com/cbeust/testng/releases/tag/7.7.1
CVE: CVE-2022-4066
Published: 2022-11-19
Description: A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.
CVSS Score: 3.5 (LOW)
CWE: CWE-404
References: https://github.com/davidmoreno/onion/commit/de8ea938342b36c28024fd8393ebc27b8442a161; https://github.com/davidmoreno/onion/pull/308; https://vuldb.com/?id.214028
CVE: CVE-2022-3516
Published: 2022-11-20
Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/librenms/librenms/commit/8e85698aa3aa4884c2f3d6c987542477eb64f07c; https://huntr.dev/bounties/734bb5eb-715c-4b64-bd33-280300a63748; https://github.com/librenms/librenms/commit/8e85698aa3aa4884c2f3d6c987542477eb64f07c
CVE: CVE-2022-3525
Published: 2022-11-20
Description: Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/librenms/librenms/commit/ae3925b09ad3c5d0f7a9d5a26ae2f2f778834948; https://huntr.dev/bounties/ed048e8d-87af-440a-a91f-be1e65a40330; https://github.com/librenms/librenms/commit/ae3925b09ad3c5d0f7a9d5a26ae2f2f778834948
CVE: CVE-2022-3561
Published: 2022-11-20
Description: Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/librenms/librenms/commit/d86cbcd96d684e4de8dfa50b4490e4e02782d242; https://huntr.dev/bounties/7389e6eb-4bce-4b97-999d-d3b70d8cee34; https://github.com/librenms/librenms/commit/d86cbcd96d684e4de8dfa50b4490e4e02782d242
CVE: CVE-2022-3562
Published: 2022-11-20
Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/librenms/librenms/commit/43cb72549d90e338f902b359a83c23d3cb5a2645; https://huntr.dev/bounties/bb9f76db-1314-44ae-9ccc-2b69679aa657; https://github.com/librenms/librenms/commit/43cb72549d90e338f902b359a83c23d3cb5a2645
CVE: CVE-2022-4067
Published: 2022-11-20
Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/librenms/librenms/commit/8e85698aa3aa4884c2f3d6c987542477eb64f07c; https://huntr.dev/bounties/3ca7023e-d95c-423f-9e9a-222a67a8ee72; https://github.com/librenms/librenms/commit/8e85698aa3aa4884c2f3d6c987542477eb64f07c
CVE: CVE-2022-4068
Published: 2022-11-20
Description: A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-915, CWE-79
References: https://github.com/librenms/librenms/commit/09a2977adb8bc4b1db116c725d661160c930d3a1; https://huntr.dev/bounties/becfecc4-22a6-4f94-bf83-d6030b625fdc; https://github.com/librenms/librenms/commit/09a2977adb8bc4b1db116c725d661160c930d3a1
CVE: CVE-2022-4069
Published: 2022-11-20
Description: Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/librenms/librenms/commit/8383376f1355812e09ec0c2af67f6d46891b7ba7; https://huntr.dev/bounties/a9925d98-dac4-4c3c-835a-d93aeecfb2c5; https://github.com/librenms/librenms/commit/8383376f1355812e09ec0c2af67f6d46891b7ba7
CVE: CVE-2022-4070
Published: 2022-11-20
Description: Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613, CWE-613
References: https://github.com/librenms/librenms/commit/ce8e5f3d056829bfa7a845f9dc2757e21e419ddc; https://huntr.dev/bounties/72d426bb-b56e-4534-88ba-0d11381b0775; https://github.com/librenms/librenms/commit/ce8e5f3d056829bfa7a845f9dc2757e21e419ddc
CVE: CVE-2022-4071
Published: 2022-11-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-4072
Published: 2022-11-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-4073
Published: 2022-11-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-4074
Published: 2022-11-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-4075
Published: 2022-11-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-4076
Published: 2022-11-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-4077
Published: 2022-11-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.