deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-25132
Published: 2023-04-24
Description: Unrestricted upload of file with dangerous type vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads; https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads; https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads
CVE: CVE-2023-25133
Published: 2023-04-24
Description: Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-269, CWE-269
References: https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads; https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads; https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads
CVE: CVE-2022-48476
Published: 2023-04-24
Description: In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible

CVSS Score: 7.5 (HIGH)
CWE: CWE-35, CWE-22
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2022-48477
Published: 2023-04-24
Description: In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing

CVSS Score: 4.1 (MEDIUM)
CWE: CWE-918
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-29578
Published: 2023-04-24
Description: mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mp4property.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/TechSmith/mp4v2/issues/74; https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/mp4property.cpp/readme.md; https://github.com/TechSmith/mp4v2/issues/74
CVE: CVE-2023-29579
Published: 2023-04-24
Description: yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/yasm/yasm/issues/214; https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-buffer-overflow/yasm/readmd.md; https://github.com/yasm/yasm/issues/214
CVE: CVE-2023-29582
Published: 2023-04-24
Description: yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=2189601#c3; https://github.com/yasm/yasm/issues/217; https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr1/readme.md
CVE: CVE-2023-29583
Published: 2023-04-24
Description: yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-121
References: https://github.com/yasm/yasm/issues/218; https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md; https://github.com/yasm/yasm/issues/218
CVE: CVE-2023-1731
Published: 2023-04-24
Description: In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.

CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm; https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-2023-02-lantime-firmware-v7-06-013.htm
CVE: CVE-2023-23892
Published: 2023-04-24
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jamie Poitra M Chart plugin <= 1.9.4 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/m-chart/wordpress-m-chart-plugin-1-9-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/m-chart/wordpress-m-chart-plugin-1-9-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29570
Published: 2023-04-24
Description: Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/cesanta/mjs/issues/240; https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_fii2/readme.md; https://github.com/cesanta/mjs/issues/240
CVE: CVE-2023-30368
Published: 2023-04-24
Description: Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC5/1.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC5/1.md
CVE: CVE-2023-30369
Published: 2023-04-24
Description: Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/3.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/3.md
CVE: CVE-2022-45084
Published: 2023-04-24
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/loginizer/wordpress-loginizer-plugin-1-7-5-unauth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/loginizer/wordpress-loginizer-plugin-1-7-5-unauth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-47158
Published: 2023-04-24
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pakpobox alfred24 Click & Collect plugin <= 1.1.7 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/alfred-click-collect/wordpress-alfred24-click-collect-plugin-1-1-7-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/alfred-click-collect/wordpress-alfred24-click-collect-plugin-1-1-7-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2022-47598
Published: 2023-04-24
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Plugins Pro WP Super Popup plugin <= 1.1.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-super-popup/wordpress-wp-super-popup-plugin-1-1-2-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/wp-super-popup/wordpress-wp-super-popup-plugin-1-1-2-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-24818
Published: 2023-04-24
Description: RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL pointer dereference. During forwarding of a fragment an uninitialized entry in the reassembly buffer is used. The NULL pointer dereference triggers a hard fault exception resulting in denial of service. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/RIOT-OS/RIOT/pull/18817/commits/0bec3e245ed3815ad6c8cae54673f[PII_REDACTED]b; https://github.com/RIOT-OS/RIOT/pull/18817/commits/17c70f7ee0b1445f2941f516f264ed4a096e82b7; https://github.com/RIOT-OS/RIOT/pull/18817/commits/aa27ed71fa3e5d48dee1748dcf27b6323ec98a33
CVE: CVE-2023-24819
Published: 2023-04-24
Description: RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-131, CWE-787, CWE-787
References: https://github.com/RIOT-OS/RIOT/pull/18817/commits/73615161c01fcfbbc7216cf502cabb12c1598ee4; https://github.com/RIOT-OS/RIOT/pull/18820/commits/da63e45ee94c03a2e08625b04ea618653eab4a9f; https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6
CVE: CVE-2023-24820
Published: 2023-04-24
Description: RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. An attacker can send a crafted frame to the device resulting in a large out of bounds write beyond the packet buffer. The write will create a hard fault exception after reaching the last page of RAM. The hard fault is not handled and the system will be stuck until reset. Thus the impact is denial of service. Version 2022.10 fixes this issue. As a workaround, apply the patch manually.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191, CWE-787, CWE-191, CWE-787
References: https://github.com/RIOT-OS/RIOT/pull/18817/commits/2709fbd827b688fe62df2c77c316914f4a3a6d4a; https://github.com/RIOT-OS/RIOT/pull/18820/commits/d052e2ee166e55bbdfe4c455e65dbd7e3479ebe3; https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-vpx8-h94p-9vrj
CVE: CVE-2023-29479
Published: 2023-04-24
Description: Ribose RNP before 0.16.3 may hang when the input is malformed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://cve.ribose.com/advisories/ra-2023-04-11/; https://open.ribose.com/advisories/ra-2023-04-11/; https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/
CVE: CVE-2023-29480
Published: 2023-04-24
Description: Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-312
References: https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/; https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/
CVE: CVE-2023-29848
Published: 2023-04-24
Description: Bang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the itemName parameter in the admin/menu.php Add New Menu function.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/171899/Bang-Resto-1.0-Cross-Site-Scripting.html; https://github.com/mesinkasir/bangresto/issues/2; http://packetstormsecurity.com/files/171899/Bang-Resto-1.0-Cross-Site-Scripting.html
CVE: CVE-2023-29849
Published: 2023-04-24
Description: Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/171900/Bang-Resto-1.0-SQL-Injection.html; https://github.com/mesinkasir/bangresto/issues/3; http://packetstormsecurity.com/files/171900/Bang-Resto-1.0-SQL-Injection.html
CVE: CVE-2023-2251
Published: 2023-04-24
Description: Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba; https://huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c; https://github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba
CVE: CVE-2023-30370
Published: 2023-04-24
Description: In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/7.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/7.md; https://github.com/Icathian-Rain/Tenda/blob/main/AC15/7.md
CVE: CVE-2023-30371
Published: 2023-04-24
Description: In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/4.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/4.md
CVE: CVE-2023-30372
Published: 2023-04-24
Description: In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/10.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/10.md; https://github.com/Icathian-Rain/Tenda/blob/main/AC15/10.md
CVE: CVE-2023-30373
Published: 2023-04-24
Description: In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/8.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/8.md; https://github.com/Icathian-Rain/Tenda/blob/main/AC15/8.md
CVE: CVE-2023-30375
Published: 2023-04-24
Description: In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/1.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/1.md
CVE: CVE-2023-30376
Published: 2023-04-24
Description: In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/9.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/9.md
CVE: CVE-2023-30378
Published: 2023-04-24
Description: In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/5.md; https://github.com/[PII_REDACTED]/Tenda/blob/main/AC15/5.md
CVE: CVE-2023-24821
Published: 2023-04-24
Description: RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a large out of bounds write beyond the packet buffer. The write will create a hard fault exception after reaching the last page of RAM. The hard fault is not handled and the system will be stuck until reset, thus the impact is denial of service. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191, CWE-787
References: https://github.com/RIOT-OS/RIOT/pull/18817/commits/9728f727e75d7d78dbfb5918e0de1b938b7b6d2c; https://github.com/RIOT-OS/RIOT/pull/18820/commits/bd31010231f5340e21410595dd95afc86bbfd341; https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-2fpr-82xr-p887
CVE: CVE-2023-24822
Published: 2023-04-24
Description: RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL pointer dereference while encoding a 6LoWPAN IPHC header. The NULL pointer dereference causes a hard fault exception, leading to denial of service. Version 2022.10 fixes this issue. As a workaround, apply the patches manually.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/RIOT-OS/RIOT/pull/18817/commits/639c04325de4ceb9d444955f4927bfae95843a39; https://github.com/RIOT-OS/RIOT/pull/18820/commits/7253e261556f252816f4a3b7c4f96fc10d642485; https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-8x69-5fhj-72wh
CVE: CVE-2023-24823
Published: 2023-04-24
Description: RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a type confusion between IPv6 extension headers and a UDP header. This occurs while encoding a 6LoWPAN IPHC header. The type confusion manifests in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. Version 2022.10 fixes this issue. As a workaround, apply the patches manually.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-843
References: https://github.com/RIOT-OS/RIOT/pull/18817/commits/4a081f86616cb5c9dd0b5d7b286da03285d1652a; https://github.com/RIOT-OS/RIOT/pull/18820/commits/dafc397fdc3655aeb5c7b9963a43f1604c6a2062; https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-jwmv-47p2-hgq2
CVE: CVE-2023-27524
Published: 2023-04-24
Description: Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.

All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database.
Add a strong SECRET_KEY to your `superset_config.py` file like:

SECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY>

Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.
CVSS Score: 8.9 (HIGH)
CWE: CWE-1188, CWE-1188
References: https://lists.apache.org/thread/n0ftx60sllf527j7g11kmt24wvof8xyk; https://packetstormsecurity.com/files/172522/Apache-Superset-2.0.0-Authentication-Bypass.html; https://packetstormsecurity.com/files/175094/Apache-Superset-2.0.0-Remote-Code-Execution.html
CVE: CVE-2023-30622
Published: 2023-04-24
Description: Clusternet is a general-purpose system for controlling Kubernetes clusters across different environments. An issue in clusternet prior to version 0.15.2 can be leveraged to lead to a cluster-level privilege escalation. The clusternet has a deployment called `cluster-hub` inside the `clusternet-system` Kubernetes namespace, which runs on worker nodes randomly. The deployment has a service account called `clusternet-hub`, which has a cluster role called `clusternet:hub` via cluster role binding. The `clusternet:hub` cluster role has `"*" verbs of "*.*"` resources. Thus, if a malicious user can access the worker node which runs the clusternet, they can leverage the service account to do malicious actions to critical system resources. For example, the malicious user can leverage the service account to get ALL secrets in the entire cluster, resulting in cluster-level privilege escalation. Version 0.15.2 contains a fix for this issue.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://github.com/clusternet/clusternet/releases/tag/v0.15.2; https://github.com/clusternet/clusternet/security/advisories/GHSA-833c-xh79-p429; https://github.com/clusternet/clusternet/releases/tag/v0.15.2
CVE: CVE-2023-30776
Published: 2023-04-24
Description: An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-522, CWE-522
References: http://www.openwall.com/lists/oss-security/2023/04/24/3; https://lists.apache.org/thread/s9w9w10mt2sngk3solwnmq5k7md53tsz; http://www.openwall.com/lists/oss-security/2023/04/24/3
CVE: CVE-2022-41612
Published: 2023-04-24
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shareaholic Similar Posts plugin <= 3.1.6 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/similar-posts/wordpress-similar-posts-plugin-3-1-6-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/similar-posts/wordpress-similar-posts-plugin-3-1-6-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-22913
Published: 2023-04-24
Description: A post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker to modify device configuration data, resulting in denial-of-service (DoS) conditions on an affected device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77, CWE-77
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps
CVE: CVE-2023-22914
Published: 2023-04-24
Description: A path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS commands in the “tmp” directory by uploading a crafted file if the hotspot function were enabled.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-of-firewalls-and-aps