deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29556
Published: 2022-04-28
Description: The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provides several SSRF primitives that can execute cross-tenant actions via internal API endpoints.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://mender.io/blog/cve-2022-29555-and-cve-2022-29556-vulnerabilities-in-iot-manager-and-deviceconnect; https://northern.tech; https://mender.io/blog/cve-2022-29555-and-cve-2022-29556-vulnerabilities-in-iot-manager-and-deviceconnect
CVE: CVE-2022-24449
Published: 2022-04-28
Description: Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-918
References: https://en.rt-solar.ru/products/solarAPPscreener/; https://github.com/jet-pentest/CVE-2022-24449; https://en.rt-solar.ru/products/solarAPPscreener/
CVE: CVE-2022-29903
Published: 2022-04-29
Description: The Private Domains extension for MediaWiki through 1.37.2 (before 1ad65d4c1c199b375ea80988d99ab51ae068f766) allows CSRF for editing pages that store the extension's configuration. The attacker must trigger a POST request to Special:PrivateDomains.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PrivateDomains/+/783416; https://phabricator.wikimedia.org/T306290; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/PrivateDomains/+/783416
CVE: CVE-2022-29904
Published: 2022-04-29
Description: The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d[PII_REDACTED]3) allows SQL injection with certain '-' and '_' constraints.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/SemanticDrilldown/+/785213; https://phabricator.wikimedia.org/T306463; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/SemanticDrilldown/+/785213
CVE: CVE-2022-29905
Published: 2022-04-29
Description: The FanBoxes extension for MediaWiki through 1.37.2 (before 027ffb0b9d6fe0d823810cf03f5b562a212162d4) allows Special:UserBoxes CSRF.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/FanBoxes/+/786327; https://phabricator.wikimedia.org/T306741; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/FanBoxes/+/786327
CVE: CVE-2022-29906
Published: 2022-04-29
Description: The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check for the quizadmin user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/QuizGame/+/765651; https://phabricator.wikimedia.org/T302199; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/QuizGame/+/765651
CVE: CVE-2022-29907
Published: 2022-04-29
Description: The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/c/786959; https://phabricator.wikimedia.org/T306815; https://gerrit.wikimedia.org/r/c/786959
CVE: CVE-2022-1526
Published: 2022-04-29
Description: A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input <script>alert(1);</script> leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login by the attacker. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/emlog%3C=pro-1.2.2%20Stored%20Cross-Site%20Scripting%28XSS%29.md; https://vuldb.com/?id.198705; https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/emlog%3C=pro-1.2.2%20Stored%20Cross-Site%20Scripting%28XSS%29.md
CVE: CVE-2022-1530
Published: 2022-04-29
Description: Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/livehelperchat/livehelperchat/commit/edef7a8387be718d0de2dfd1e722789afb0461bc; https://huntr.dev/bounties/8fd8de01-7e83-4324-9cc8-a97acb9b70d6; https://github.com/livehelperchat/livehelperchat/commit/edef7a8387be718d0de2dfd1e722789afb0461bc
CVE: CVE-2022-1531
Published: 2022-04-29
Description: SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint_2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/rtxteam/rtx/commit/fa2797e656e3dba18f990a2db1f0f029d41f1921; https://huntr.dev/bounties/fc4eb544-ef1e-412d-9fdb-0ceb04e038fe; https://github.com/rtxteam/rtx/commit/fa2797e656e3dba18f990a2db1f0f029d41f1921
CVE: CVE-2022-1533
Published: 2022-04-29
Description: Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-126, CWE-125
References: https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f; https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3; https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f
CVE: CVE-2022-1534
Published: 2022-04-29
Description: Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
CVSS Score: 7.1 (HIGH)
CWE: CWE-126, CWE-125
References: https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b; https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d; https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b
CVE: CVE-2021-41942
Published: 2022-04-29
Description: The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.cnvd.org.cn/flaw/show/CNVD-2021-35892; https://www.cnvd.org.cn/flaw/show/CNVD-2021-35892
CVE: CVE-2021-44595
Published: 2022-04-29
Description: Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://dr.com; http://packetstormsecurity.com/files/167036/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html; http://wondershare.com
CVE: CVE-2021-44596
Published: 2022-04-29
Description: Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges
CVSS Score: 9.8 (CRITICAL)
References: http://dr.com; http://packetstormsecurity.com/files/167035/Wondershare-Dr.Fone-12.0.7-Privilege-Escalation.html; http://wondershare.com
CVE: CVE-2022-1536
Published: 2022-04-29
Description: A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Home</title><script>alert("home")</script><title> leads to a cross site scripting. The attack can be initiated remotely but requires an authentication. The exploit details have disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/automad%3C%3D1.10.9%20Stored%20Cross-Site%20Scripting%28XSS%29.md; https://vuldb.com/?id.198706; https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/automad%3C%3D1.10.9%20Stored%20Cross-Site%20Scripting%28XSS%29.md
CVE: CVE-2021-41948
Published: 2022-04-29
Description: A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects".
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/intelliants/subrion-plugin-contact_us/issues/8; https://github.com/intelliants/subrion-plugin-contact_us/issues/8
CVE: CVE-2022-24900
Published: 2022-04-29
Description: Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer. Version 1.3 and prior are vulnerable to a path traversal attack. The `os.path.join` call is unsafe for use with untrusted input. When the `os.path.join` call encounters an absolute path, it ignores all the parameters it has encountered till that point and starts working with the new absolute path. Since the "malicious" parameter represents an absolute path, the result of `os.path.join` ignores the static directory completely. Hence, untrusted input is passed via the `os.path.join` call to `flask.send_file` can lead to path traversal attacks. A patch with a fix is available on the `master` branch of the GitHub repository. This can also be fixed by preventing flow of untrusted data to the vulnerable `send_file` function. In case the application logic necessiates this behaviour, one can either use the `flask.safe_join` to join untrusted paths or replace `flask.send_file` calls with `flask.send_from_directory` calls.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22, CWE-73, CWE-668
References: https://github.com/onlaj/Piano-LED-Visualizer/blob/6a732caa812c83a807c711f3d091af99209cae7b/webinterface/views_api.py#L970; https://github.com/onlaj/Piano-LED-Visualizer/commit/3f10602323cd8184e1c69a76b815655597bf0ee5; https://github.com/onlaj/Piano-LED-Visualizer/issues/350
CVE: CVE-2022-28452
Published: 2022-04-29
Description: Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/YavuzSahbaz/Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL; https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-28452; https://laundry.redplanetcomputers.com/
CVE: CVE-2021-39082
Published: 2022-04-29
Description: IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/215693; https://www.ibm.com/support/pages/node/6576179; https://exchange.xforce.ibmcloud.com/vulnerabilities/215693
CVE: CVE-2021-43937
Published: 2022-04-29
Description: Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
CVSS Score: 7.6 (HIGH)
CWE: CWE-200, CWE-352
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-05; https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-05
CVE: CVE-2021-43938
Published: 2022-04-29
Description: Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200, CWE-862
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-05; https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-05
CVE: CVE-2022-0985
Published: 2022-04-29
Description: Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=2064117; https://bugzilla.redhat.com/show_bug.cgi?id=2064117
CVE: CVE-2022-1015
Published: 2022-04-29
Description: A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/; http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html; http://www.openwall.com/lists/oss-security/2022/08/25/2
CVE: CVE-2022-1048
Published: 2022-04-29
Description: A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-362, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2066706; https://lore.kernel.org/lkml/[PII_REDACTED]0720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-1114
Published: 2022-04-29
Description: A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2064538; https://bugzilla.redhat.com/show_bug.cgi?id=2064538
CVE: CVE-2022-1195
Published: 2022-04-29
Description: A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device is detached and reclaim resources early.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2056381; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b9111922b1f399aba6ed1e1b8f2079c3da1aed8; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e0588c291d6ce225f2b891753ca41d45ba42469
CVE: CVE-2022-1227
Published: 2022-04-29
Description: A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-281, CWE-269
References: https://bugzilla.redhat.com/show_bug.cgi?id=2070368; https://github.com/containers/podman/issues/10941; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/
CVE: CVE-2022-1249
Published: 2022-04-29
Description: A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.
CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=2065771; https://bugzilla.redhat.com/show_bug.cgi?id=2065771
CVE: CVE-2022-1353
Published: 2022-04-29
Description: A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=2066819; https://github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c; https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
CVE: CVE-2022-29856
Published: 2022-04-29
Description: A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://dolosgroup.io/blog; https://www.automationanywhere.com/products/automation-360; https://dolosgroup.io/blog
CVE: CVE-2021-36207
Published: 2022-04-29
Description: Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-118-01; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/uscert/ics/advisories/icsa-22-118-01
CVE: CVE-2021-3982
Published: 2022-04-29
Description: Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler priority leading to possible DoS of other services running in the same machine.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-273, CWE-273
References: https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2284; https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/2060; https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2284
CVE: CVE-2021-4206
Published: 2022-04-29
Description: A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.
CVSS Score: 8.2 (HIGH)
CWE: CWE-190, CWE-120, CWE-131, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=2036998; https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html; https://security.gentoo.org/glsa/202208-27
CVE: CVE-2021-4207
Published: 2022-04-29
Description: A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.
CVSS Score: 8.2 (HIGH)
CWE: CWE-362, CWE-120, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=2036966; https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html; https://security.gentoo.org/glsa/202208-27
CVE: CVE-2022-0984
Published: 2022-04-29
Description: Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=2064118; https://bugzilla.redhat.com/show_bug.cgi?id=2064118
CVE: CVE-2022-1402
Published: 2022-04-29
Description: ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-111-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-111-01
CVE: CVE-2022-1403
Published: 2022-04-29
Description: ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-111-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-111-01
CVE: CVE-2022-28480
Published: 2022-04-29
Description: ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://packetstormsecurity.com/files/166465/ALLMediaServer-1.6-Remote-Buffer-Overflow.html; https://packetstormsecurity.com/files/166465/ALLMediaServer-1.6-Remote-Buffer-Overflow.html
CVE: CVE-2022-28994
Published: 2022-04-29
Description: Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://packetstormsecurity.com/files/166622/Small-HTTP-Server-3.06-Remote-Buffer-Overflow.html; https://packetstormsecurity.com/files/166622/Small-HTTP-Server-3.06-Remote-Buffer-Overflow.html
CVE: CVE-2022-29414
Published: 2022-04-29
Description: Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to clean up Log archive, download system info file, plugin system settings, plugin options settings, generate a new key, reset all options, change notifications settings, management page settings, comment form settings, manage subscriptions > mass update settings, manage subscriptions > add a new subscription, update subscription, delete Subscription.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/subscribe-to-comments-reloaded/wordpress-subscribe-to-comments-reloaded-plugin-211130-multiple-cross-site-request-forgery-csrf-vulnerabilities; https://wordpress.org/plugins/subscribe-to-comments-reloaded/; https://patchstack.com/database/vulnerability/subscribe-to-comments-reloaded/wordpress-subscribe-to-comments-reloaded-plugin-211130-multiple-cross-site-request-forgery-csrf-vulnerabilities
CVE: CVE-2022-29451
Published: 2022-04-29
Description: Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows attackers to trick logged-in admin users into uploading dangerous files into /wp-content/uploads/ directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-434
References: https://patchstack.com/database/vulnerability/rara-one-click-demo-import/wordpress-rara-one-click-demo-import-plugin-1-2-9-cross-site-request-forgery-csrf-leads-to-arbitrary-file-upload-vulnerability; https://wordpress.org/plugins/rara-one-click-demo-import/#developers; https://patchstack.com/database/vulnerability/rara-one-click-demo-import/wordpress-rara-one-click-demo-import-plugin-1-2-9-cross-site-request-forgery-csrf-leads-to-arbitrary-file-upload-vulnerability
CVE: CVE-2022-29934
Published: 2022-04-29
Description: USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Oracle Corporation product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-4vr2-wxp6-w29v; https://github.com/orangecertcc/security-research/security/advisories/GHSA-4vr2-wxp6-w29v
CVE: CVE-2022-29935
Published: 2022-04-29
Description: USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download. NOTE: this is not an Oracle Corporation product.
CVSS Score: 7.5 (HIGH)
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-rcp9-qm7c-5mmx; https://github.com/orangecertcc/security-research/security/advisories/GHSA-rcp9-qm7c-5mmx