deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-41767
Published: 2022-12-26
Description: An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are reassigned to a user (using reassignEdits.php), the changes will still be attributed to the IP address on Special:Contributions when doing a range lookup.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://phabricator.wikimedia.org/T316304; https://security.gentoo.org/glsa/202305-24; https://phabricator.wikimedia.org/T316304
CVE: CVE-2019-25085
Published: 2022-12-26
Description: A vulnerability was found in GNOME gvdb. It has been classified as critical. This affects the function gvdb_table_write_contents_async of the file gvdb-builder.c. The manipulation leads to use after free. It is possible to initiate the attack remotely. The name of the patch is d83587b2a364eb9a9a53be7e6a708074e252de14. It is recommended to apply a patch to fix this issue. The identifier VDB-216789 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-416
References: https://github.com/GNOME/gvdb/commit/d83587b2a364eb9a9a53be7e6a708074e252de14; https://vuldb.com/?ctiid.216789; https://vuldb.com/?id.216789
CVE: CVE-2021-30134
Published: 2022-12-26
Description: php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/0b547728-27d2-402e-ae17-90d539344ec7; https://wpscan.com/vulnerability/0b547728-27d2-402e-ae17-90d539344ec7
CVE: CVE-2021-35065
Published: 2022-12-26
Description: The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://github.com/gulpjs/glob-parent/commit/3e9f04a3b4349db7e1962d87c9a7398cda51f339; https://github.com/gulpjs/glob-parent/pull/49; https://security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294
CVE: CVE-2022-4742
Published: 2022-12-26
Description: A vulnerability, which was classified as critical, has been found in json-pointer up to 0.6.1. Affected by this issue is the function set of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack may be launched remotely. Upgrading to version 0.6.2 is able to address this issue. The patch is identified as 859c9984b6c407fc2d5a0a7e47c7274daa681941. It is recommended to upgrade the affected component. VDB-216794 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-1321
References: https://github.com/manuelstofer/json-pointer/commit/859c9984b6c407fc2d5a0a7e47c7274daa681941; https://github.com/manuelstofer/json-pointer/pull/36; https://vuldb.com/?ctiid.216794
CVE: CVE-2021-24942
Published: 2022-12-26
Description: The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/eaa28832-74c1-4cd5-9b0f-02338e23b418; https://wpscan.com/vulnerability/eaa28832-74c1-4cd5-9b0f-02338e23b418
CVE: CVE-2022-3835
Published: 2022-12-26
Description: The Kwayy HTML Sitemap WordPress plugin before 4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/514ffd28-f2c2-4c95-87b5-d05ce0746f89; https://wpscan.com/vulnerability/514ffd28-f2c2-4c95-87b5-d05ce0746f89
CVE: CVE-2022-3840
Published: 2022-12-26
Description: The Login for Google Apps WordPress plugin before 3.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/71414436-ef54-4ce6-94e2-62e68d1a371d; https://wpscan.com/vulnerability/71414436-ef54-4ce6-94e2-62e68d1a371d
CVE: CVE-2022-4042
Published: 2022-12-26
Description: The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/8ec76242-717d-4d2d-9c0f-3056cd7c2c90; https://wpscan.com/vulnerability/8ec76242-717d-4d2d-9c0f-3056cd7c2c90
CVE: CVE-2022-4047
Published: 2022-12-26
Description: The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/8965a87c-5fe5-4b39-88f3-e00966ca1d94; https://wpscan.com/vulnerability/8965a87c-5fe5-4b39-88f3-e00966ca1d94
CVE: CVE-2022-4110
Published: 2022-12-26
Description: The Eventify™ WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/037a81b2-8fd8-4898-bb5b-d15d9a38778c; https://wpscan.com/vulnerability/037a81b2-8fd8-4898-bb5b-d15d9a38778c
CVE: CVE-2022-4117
Published: 2022-12-26
Description: The IWS WordPress plugin through 1.0 does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/1fac3eb4-13c0-442d-b27c-7b[PII_REDACTED]; https://wpscan.com/vulnerability/1fac3eb4-13c0-442d-b27c-7b[PII_REDACTED]
CVE: CVE-2022-4120
Published: 2022-12-26
Description: The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize() PHP function when CAPTCHA are used as second challenge, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadget chain
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/e8bb79db-ef77-43be-b449-4c4b5310eedf; https://wpscan.com/vulnerability/e8bb79db-ef77-43be-b449-4c4b5310eedf
CVE: CVE-2022-4150
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_13; https://wpscan.com/vulnerability/d5d39138-a216-46cd-9e5f-fc706a2c93da; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_13
CVE: CVE-2022-4151
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id GET parameter before concatenating it to an SQL query in export-images-data.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_2; https://wpscan.com/vulnerability/e1320c2a-818d-4e91-8dc9-ba95a1dc4377; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_2
CVE: CVE-2022-4152
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the option_id POST parameter before concatenating it to an SQL query in edit-options.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_4; https://wpscan.com/vulnerability/4b[PII_REDACTED]-42ed-a796-b6c6cb08a9fc; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_4
CVE: CVE-2022-4153
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the upload[] POST parameter before concatenating it to an SQL query in get-data-create-upload-v10.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_7; https://wpscan.com/vulnerability/35b0126d-9293-4e64-a00f-0903303f960a; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_7
CVE: CVE-2022-4154
Published: 2022-12-26
Description: The Contest Gallery Pro WordPress plugin before 19.1.5 does not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with at administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site's database.
CVSS Score: 4.9 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_5; https://wpscan.com/vulnerability/dac32ed4-d3df-420a-a2eb-9e7d2435826a; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_5
CVE: CVE-2022-4155
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site's database.
CVSS Score: 4.9 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_6; https://wpscan.com/vulnerability/a55c6a62-3744-4374-b01a-cb074ac64b4d; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_6
CVE: CVE-2022-4156
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the user_id POST parameter before concatenating it to an SQL query in ajax-functions-backend.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 7.5 (HIGH)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_1; https://wpscan.com/vulnerability/254f6e8b-5fa9-4d6d-8e0e-1a4cae18aee0; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_1
CVE: CVE-2022-4157
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_option_id POST parameter before concatenating it to an SQL query in export-votes-all.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site's database.
CVSS Score: 4.9 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_3; https://wpscan.com/vulnerability/71feec63-67a5-482e-bf77-1396c306fae6; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_3
CVE: CVE-2022-4158
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_Fields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive information from the site's database.
CVSS Score: 7.5 (HIGH)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_15; https://wpscan.com/vulnerability/1b3b51af-ad73-4f8e-ba97-375b8a363b64; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_15
CVE: CVE-2022-4159
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_id POST parameter before concatenating it to an SQL query in 0_change-gallery.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_8; https://wpscan.com/vulnerability/2e[PII_REDACTED]-4e9d-9ca6-2b5f774e9965; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_8
CVE: CVE-2022-4160
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_id POST parameter before concatenating it to an SQL query in  cg-copy-comments.php and cg-copy-rating.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_14; https://wpscan.com/vulnerability/813de343-4814-42b8-b8df[PII_REDACTED]cd; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_14
CVE: CVE-2022-4161
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_start POST parameter before concatenating it to an SQL query in copy-gallery-images.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_16; https://wpscan.com/vulnerability/a66af8f7-1d5f-4fe5-a2ba[PII_REDACTED]3b; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_16
CVE: CVE-2022-4162
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_row POST parameter before concatenating it to an SQL query in 3_row-order.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_9; https://wpscan.com/vulnerability/011500ac-17e4-4d4f-bbd9-1fec70511776; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_9
CVE: CVE-2022-4163
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_deactivate and cg_activate POST parameters before concatenating it to an SQL query in  2_deactivate.php and 4_activate.php, respectively. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_10; https://wpscan.com/vulnerability/de0d7db7-f911-4f5f-97f6-885ca60822d1; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_10
CVE: CVE-2022-4164
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_multiple_files_for_post POST parameter before concatenating it to an SQL query in 0_change-gallery.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_11; https://wpscan.com/vulnerability/57fff222-2c64-4b52-86cd-ab8db4541627; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_11
CVE: CVE-2022-4165
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_order POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_17; https://wpscan.com/vulnerability/857aba7d-fccd-4672-b734-ab228440dcc0; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_17
CVE: CVE-2022-4166
Published: 2022-12-26
Description: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4_activate.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
CVSS Score: 6.5 (MEDIUM)
References: https://bulletin.iese.de/post/contest-gallery_19-1-4-1_12; https://wpscan.com/vulnerability/6e7de2bb-5f71-4c27-ae79-4f6b2ba7f86f; https://bulletin.iese.de/post/contest-gallery_19-1-4-1_12
CVE: CVE-2022-4197
Published: 2022-12-26
Description: The Sliderby10Web WordPress plugin before 1.2.53 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/96818024-57ab-419d-bd46-7d2da98269e6; https://wpscan.com/vulnerability/96818024-57ab-419d-bd46-7d2da98269e6
CVE: CVE-2022-4226
Published: 2022-12-26
Description: The Simple Basic Contact Form WordPress plugin before 20221201 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/c5ca22e0-b7a5-468d-8366-1855ff33851b; https://wpscan.com/vulnerability/c5ca22e0-b7a5-468d-8366-1855ff33851b
CVE: CVE-2022-4227
Published: 2022-12-26
Description: The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/90d3022c-5d35-4ef2-ab87-6919268db890; https://wpscan.com/vulnerability/90d3022c-5d35-4ef2-ab87-6919268db890
CVE: CVE-2022-4239
Published: 2022-12-26
Description: The Workreap WordPress theme before 2.6.4 does not verify that an addon service belongs to the user issuing the request, or indeed that it is an addon service, when processing the workreap_addons_service_remove action, allowing any user to delete any post by knowing or guessing the id.
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/1c163987-fb53-43f7-bbff-1c2d8c0d694c; https://wpscan.com/vulnerability/1c163987-fb53-43f7-bbff-1c2d8c0d694c
CVE: CVE-2022-4242
Published: 2022-12-26
Description: The WP Google Review Slider WordPress plugin before 11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/d7f89335-630c-47c6-bebf-92f556caa087; https://wpscan.com/vulnerability/d7f89335-630c-47c6-bebf-92f556caa087
CVE: CVE-2022-4243
Published: 2022-12-26
Description: The ImageInject WordPress plugin through 1.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/fc1fc057-97ee-4a10-909f-2f11eafa0bd0; https://wpscan.com/vulnerability/fc1fc057-97ee-4a10-909f-2f11eafa0bd0
CVE: CVE-2022-4266
Published: 2022-12-26
Description: The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/1bcda9d3-c573-441e-828f-055fbec2e08d; https://wpscan.com/vulnerability/1bcda9d3-c573-441e-828f-055fbec2e08d
CVE: CVE-2022-4267
Published: 2022-12-26
Description: The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/e09754f2-e241-4bf8-8c95-a3fbc0ba7585; https://wpscan.com/vulnerability/e09754f2-e241-4bf8-8c95-a3fbc0ba7585
CVE: CVE-2022-4268
Published: 2022-12-26
Description: The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
CVSS Score: 7.2 (HIGH)
References: https://bulletin.iese.de/post/plugin-logic_1-0-7/; https://wpscan.com/vulnerability/bde93d90-1178-4d55-aea9-e02c4f8bcaa2; https://bulletin.iese.de/post/plugin-logic_1-0-7/
CVE: CVE-2020-12067
Published: 2022-12-26
Description: In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640, CWE-640
References: https://cert.vde.com/en/advisories/VDE-2021-061/; https://cert.vde.com/en/advisories/VDE-2021-061/
CVE: CVE-2020-12069
Published: 2022-12-26
Description: In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-916, CWE-916
References: https://cert.vde.com/en/advisories/VDE-2021-061/; https://cert.vde.com/en/advisories/VDE-2022-022/; https://cert.vde.com/en/advisories/VDE-2022-031/
CVE: CVE-2019-9011
Published: 2022-12-26
Description: In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://cert.vde.com/en/advisories/VDE-2021-061/; https://cert.vde.com/en/advisories/VDE-2021-061/
CVE: CVE-2019-9579
Published: 2022-12-26
Description: An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITE_XATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are used to implement NT named streams, the SMB protocol requires implementations to have open handle semantics similar to those of NTFS, and the SMB server passes along certain attribute requests to the underlying object (i.e., they are not considered to be requests that pertain to the named stream).
CVSS Score: 8.1 (HIGH)
CWE: CWE-276
References: https://www.illumos.org/issues/10506; https://www.oracle.com/security-alerts/cpuapr2020.html; https://www.illumos.org/issues/10506