deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36227
Published: 2022-11-22
Description: In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: "In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://bugs.gentoo.org/882521; https://github.com/libarchive/libarchive/blob/v3.0.0a/libarchive/archive_write.c#L215; https://github.com/libarchive/libarchive/issues/1754
CVE: CVE-2022-40602
Published: 2022-11-22
Description: A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-798
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-configured-password-vulnerability-of-lte3301-m209; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-configured-password-vulnerability-of-lte3301-m209
CVE: CVE-2022-4111
Published: 2022-11-22
Description: Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://github.com/tooljet/tooljet/commit/01cd3f[PII_REDACTED]ec329e9fb1ea12743d3235cc; https://huntr.dev/bounties/5596d072-66d2-4361-8cac-101c9c781c3d; https://github.com/tooljet/tooljet/commit/01cd3f[PII_REDACTED]ec329e9fb1ea12743d3235cc
CVE: CVE-2022-37931
Published: 2022-11-22
Description: A vulnerability in NetBatch-Plus software allows unauthorized access to the application. 

HPE has provided a workaround and fix. Please refer to HPE Security Bulletin 

HPESBNS04388 

for details.

CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-287
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04388en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04388en_us
CVE: CVE-2022-45363
Published: 2022-11-22
Description: Auth. (subscriber+) Stored Cross-Site Scripting (XSS) in Muffingroup Betheme theme <= 26.6.1 on WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-38649
Published: 2022-11-22
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airflow Pinot Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Apache Airflow Pinot Provider is installed (Apache Airflow Pinot Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Pinot Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/apache/airflow/pull/27641; https://lists.apache.org/thread/033o1gbc4ly6dpd2xf1o201v56fbl4dz; https://github.com/apache/airflow/pull/27641
CVE: CVE-2022-40189
Published: 2022-11-22
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Pig Provider is installed (Pig Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Pig Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/apache/airflow/pull/27644; https://lists.apache.org/thread/yxnfzfw2w9pj5s785k3rlyly4y44sd15; https://github.com/apache/airflow/pull/27644
CVE: CVE-2022-40954
Published: 2022-11-22
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Spark Provider is installed (Spark Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Spark Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Spark Provider installed).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://github.com/apache/airflow/pull/27646; https://lists.apache.org/thread/0tmdlnmjs5t4gsx5fy73tb6zd3jztq45; https://github.com/apache/airflow/pull/27646
CVE: CVE-2022-41131
Published: 2022-11-22
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider versions prior to 4.1.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case HIve Provider is installed (Hive Provider 4.1.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the HIve Provider version 4.1.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Hive Provider installed).
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/apache/airflow/pull/27647; https://lists.apache.org/thread/wwo3qp0z8gv54yzn7hr04wy4n8gb0vhl; https://github.com/apache/airflow/pull/27647
CVE: CVE-2022-2513
Published: 2022-11-22
Description: A vulnerability exists in the Intelligent Electronic Device (IED) Connectivity Package (ConnPack) credential storage function in Hitachi Energy’s PCM600 product included in the versions listed below, where IEDs credentials are stored in a cleartext format in the PCM600 database and logs files. An attacker having get access to the exported backup file can exploit the vulnerability and obtain user credentials of the IEDs. Additionally, an attacker with administrator access to the PCM600 host machine can obtain other user credentials by analyzing database log files. The credentials may be used to perform unauthorized modifications such as loading incorrect configurations, reboot the IEDs or cause a denial-of-service on the IEDs.
CVSS Score: 7.1 (HIGH)
CWE: CWE-312, CWE-312
References: https://publisher.hitachienergy.com/preview?DocumentID=8DBD000120&LanguageCode=en&DocumentPartId=&Action=Launch; https://publisher.hitachienergy.com/preview?DocumentID=8DBD000120&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-37301
Published: 2022-11-22
Description: A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://www.se.com/us/en/download/document/SEVD-2022-221-02/; https://www.se.com/us/en/download/document/SEVD-2022-221-02/
CVE: CVE-2022-0222
Published: 2022-11-22
Description: A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUs(BMXP34* versions prior to V3.40), Modicon M340 X80 Ethernet Communication modules:BMXNOE0100 (H), BMXNOE0110 (H), BMXNOR0200H RTU(BMXNOE* all versions)(BMXNOR* versions prior to v1.7 IR24)
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-269
References: https://www.se.com/us/en/download/document/SEVD-2022-102-02/; https://www.se.com/us/en/download/document/SEVD-2022-102-02/
CVE: CVE-2022-38462
Published: 2022-11-22
Description: Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://forum.silverstripe.org/c/releases; https://www.silverstripe.org/blog/tag/release; https://www.silverstripe.org/download/security-releases/
CVE: CVE-2022-3910
Published: 2022-11-22
Description: Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation.
When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately.

We recommend upgrading past commit  https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 

CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679; https://kernel.dance/#fc7222c3a9f56271fba02aabbfbae999042f1679; https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679
CVE: CVE-2022-42094
Published: 2022-11-22
Description: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://backdropcms.org; https://github.com/backdrop/backdrop/releases/tag/1.23.0; https://github.com/bypazs/CVE-2022-42094
CVE: CVE-2022-42097
Published: 2022-11-22
Description: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://backdropcms.org; https://github.com/backdrop/backdrop/releases/tag/1.23.0; https://github.com/bypazs/CVE-2022-42097
CVE: CVE-2022-42098
Published: 2022-11-22
Description: KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/bypazs/CVE-2022-42098; https://github.com/msaad1999/KLiK-SocialMediaWebsite; https://github.com/msaad1999/KLiK-SocialMediaWebsite/releases/tag/v1.0.1
CVE: CVE-2022-33012
Published: 2022-11-22
Description: Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74, CWE-74
References: https://blog.jitendrapatro.me/cve-2022-33012-account-takeover-through-password-reset-poisoning/; https://github.com/microweber/microweber; https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Account%20Takeover#account-takeover-through-password-reset-poisoning
CVE: CVE-2022-41445
Published: 2022-11-22
Description: A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Subject page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://drive.google.com/file/d/18OjJQA2-8-Hdt0HTMwp4aL_Mp_WuffvL/view?usp=sharing; https://github.com/RashidKhanPathan/CVE-2022-41445; https://ihexcoder.wixsite.com/secresearch/post/cve-2022-41445-cross-site-scripting-in-teachers-record-management-system-using-codeignitor
CVE: CVE-2022-42989
Published: 2022-11-22
Description: ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Caixa de Entrada.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: http://erp.com; http://sankhya.com; https://github.com/0xLUC4S/CVEs/blob/main/SankhyaERP_XSS_Account_Takeover.txt
CVE: CVE-2022-44186
Published: 2022-11-22
Description: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/4; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/4
CVE: CVE-2022-44187
Published: 2022-11-22
Description: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/3; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/3
CVE: CVE-2022-44188
Published: 2022-11-22
Description: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/5; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/5
CVE: CVE-2022-44190
Published: 2022-11-22
Description: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/6; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/6
CVE: CVE-2022-44191
Published: 2022-11-22
Description: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/8; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/8
CVE: CVE-2022-44193
Published: 2022-11-22
Description: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/10; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/10
CVE: CVE-2022-44194
Published: 2022-11-22
Description: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: http://netgear.com; http://routerlogin.net/WLG_ap_dual_band.htm; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/11
CVE: CVE-2022-44196
Published: 2022-11-22
Description: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/13; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/13
CVE: CVE-2022-44197
Published: 2022-11-22
Description: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/15; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/15
CVE: CVE-2022-44198
Published: 2022-11-22
Description: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/14; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/14
CVE: CVE-2022-44199
Published: 2022-11-22
Description: Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/16; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/16
CVE: CVE-2022-44200
Published: 2022-11-22
Description: Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/17; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/17
CVE: CVE-2022-44184
Published: 2022-11-22
Description: Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/1; https://www.netgear.com/about/security/; https://github.com/RobinWang825/IoT_vuln/tree/main/Netgear/R7000P/1
CVE: CVE-2022-44201
Published: 2022-11-22
Description: D-Link DIR823G 1.02B05 is vulnerable to Commad Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/RobinWang825/IoT_vuln/blob/main/D-Link/DIR-823G/1/readme.md; https://www.dlink.com/en/security-bulletin/; https://github.com/RobinWang825/IoT_vuln/blob/main/D-Link/DIR-823G/1/readme.md
CVE: CVE-2022-44202
Published: 2022-11-22
Description: D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/blob/main/D-Link/DIR-878/1/readme.md; https://www.dlink.com/en/security-bulletin/; https://github.com/RobinWang825/IoT_vuln/blob/main/D-Link/DIR-878/1/readme.md
CVE: CVE-2022-44801
Published: 2022-11-22
Description: D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-878/3; https://www.dlink.com/en/security-bulletin/; https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-878/3
CVE: CVE-2022-44804
Published: 2022-11-22
Description: D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/2; https://www.dlink.com/en/security-bulletin/; https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/2
CVE: CVE-2022-44806
Published: 2022-11-22
Description: D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/4; https://www.dlink.com/en/security-bulletin/; https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/4
CVE: CVE-2022-44807
Published: 2022-11-22
Description: D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/5; https://www.dlink.com/en/security-bulletin/; https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-882/5
CVE: CVE-2022-44808
Published: 2022-11-22
Description: A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function executes an untrusted command that triggers the vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1; https://github.com/RobinWang825/IoT_vuln/tree/main/D-Link/DIR-823G/2; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2022-41952
Published: 2022-11-22
Description: Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time. Connections will only be terminated after `max_spider_size` (default: 10M) bytes have been downloaded, which can in some cases lead to long-lived connections towards the streaming media server (for instance, Icecast). This can cause excessive traffic and connections toward such servers if their stream URL is, for example, posted to a large room with many Synapse instances with URL preview enabled. Version 1.52.0 implements a timeout mechanism which will terminate URL preview connections after 30 seconds. Since generating URL previews for media streams is not supported and always fails, 1.53.0 additionally implements an allow list for content types for which Synapse will even attempt to generate a URL preview. Upgrade to 1.53.0 to fully resolve the issue. As a workaround, turn off URL preview functionality by setting `url_preview_enabled: false` in the Synapse configuration file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-772
References: https://github.com/matrix-org/synapse/pull/11784; https://github.com/matrix-org/synapse/pull/11936; https://github.com/matrix-org/synapse/releases/tag/v1.52.0
CVE: CVE-2022-44737
Published: 2022-11-22
Description: Multiple Cross-Site Request Forgery vulnerabilities in All-In-One Security (AIOS) – Security and Firewall (WordPress plugin) <= 5.1.0 on WordPress.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/all-in-one-wp-security-and-firewall/wordpress-all-in-one-wp-security-plugin-5-1-0-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve; https://patchstack.com/database/vulnerability/all-in-one-wp-security-and-firewall/wordpress-all-in-one-wp-security-plugin-5-1-0-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve
CVE: CVE-2022-39066
Published: 2022-11-22
Description: There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027744; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027744
CVE: CVE-2022-39067
Published: 2022-11-22
Description: There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacker could use the vulnerability to perform a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027784; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027784
CVE: CVE-2022-39070
Published: 2022-11-22
Description: There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027824; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027824