deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-38278
Published: 2022-03-23
Description: Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-router-part-2-strcpy-buffer-overflow-92cd88e1d503; https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-router-part-2-strcpy-buffer-overflow-92cd88e1d503
CVE: CVE-2021-38772
Published: 2022-03-23
Description: Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-router-part-3-yet-another-buffer-overflow-4eb322f64823; https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-router-part-3-yet-another-buffer-overflow-4eb322f64823
CVE: CVE-2022-26243
Published: 2022-03-23
Description: Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow in the setSmartPowerManagement function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-router-part-4-sscanf-buffer-overflow-75ae0e06abb6; https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-router-part-4-sscanf-buffer-overflow-75ae0e06abb6
CVE: CVE-2021-27418
Published: 2022-03-23
Description: GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTML encoding of user-supplied strings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02; https://www.gegridsolutions.com/Passport/Login.aspx; https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
CVE: CVE-2021-27420
Published: 2022-03-23
Description: GE UR firmware versions prior to version 8.1x web server task does not properly handle receipt of unsupported HTTP verbs, resulting in the web server becoming temporarily unresponsive after receiving a series of unsupported HTTP requests. When unresponsive, the web server is inaccessible. By itself, this is not particularly significant as the relay remains effective in all other functionality and communication channels.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02; https://www.gegridsolutions.com/Passport/Login.aspx; https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
CVE: CVE-2021-27422
Published: 2022-03-23
Description: GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-319
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02; https://www.gegridsolutions.com/Passport/Login.aspx; https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
CVE: CVE-2021-27424
Published: 2022-03-23
Description: GE UR firmware versions prior to version 8.1x shares MODBUS memory map as part of the communications guide. GE was made aware a “Last-key pressed” MODBUS register can be used to gain unauthorized information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02; https://www.gegridsolutions.com/Passport/Login.aspx; https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
CVE: CVE-2021-27426
Published: 2022-03-23
Description: GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-453
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02; https://www.gegridsolutions.com/Passport/Login.aspx; https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
CVE: CVE-2021-27428
Published: 2022-03-23
Description: GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without appropriate privileges. The weakness is assessed, and mitigation is implemented in firmware Version 8.10.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02; https://www.gegridsolutions.com/Passport/Login.aspx; https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
CVE: CVE-2021-27430
Published: 2022-03-23
Description: GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR.
CVSS Score: 8.4 (HIGH)
CWE: CWE-798, CWE-798
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02; https://www.gegridsolutions.com/Passport/Login.aspx; https://www.cisa.gov/uscert/ics/advisories/icsa-21-075-02
CVE: CVE-2021-27456
Published: 2022-03-23
Description: Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
CVSS Score: 2.4 (LOW)
CWE: CWE-921, CWE-922
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01; https://www.philips.com/productsecurity; https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01
CVE: CVE-2021-27460
Published: 2022-03-23
Description: Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthenticated attacker to gain full access to the FactoryTalk AssetCentre main server and all agent machines.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-27462
Published: 2022-03-23
Description: A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-27464
Published: 2022-03-23
Description: The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-27466
Published: 2022-03-23
Description: A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-27468
Published: 2022-03-23
Description: The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-27470
Published: 2022-03-23
Description: A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-27471
Published: 2022-03-23
Description: The parsing mechanism that processes certain file types does not provide input sanitization for file paths. This may allow an attacker to craft malicious files that, when opened by Rockwell Automation Connected Components Workbench v12.00.00 and prior, can traverse the file system. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the Connected Components Workbench software. User interaction is required for this exploit to be successful.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-22
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435; https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435
CVE: CVE-2021-27472
Published: 2022-03-23
Description: A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-27473
Published: 2022-03-23
Description: Rockwell Automation Connected Components Workbench v12.00.00 and prior does not sanitize paths specified within the .ccwarc archive file during extraction. This type of vulnerability is also commonly referred to as a Zip Slip. A local, authenticated attacker can create a malicious .ccwarc archive file that, when opened by Connected Components Workbench, will allow the attacker to gain the privileges of the software. If the software is running at SYSTEM level, the attacker will gain admin level privileges. User interaction is required for this exploit to be successful.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435; https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435
CVE: CVE-2021-27474
Published: 2022-03-23
Description: Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-676
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-27475
Published: 2022-03-23
Description: Rockwell Automation Connected Components Workbench v12.00.00 and prior does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.
CVSS Score: 8.6 (HIGH)
CWE: CWE-502, CWE-502
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435; https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131435
CVE: CVE-2021-27476
Published: 2022-03-23
Description: A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831; https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01; https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
CVE: CVE-2021-3589
Published: 2022-03-23
Description: An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 8.0 (HIGH)
CWE: CWE-306, CWE-306
References: https://access.redhat.com/security/cve/CVE-2021-3589; https://bugzilla.redhat.com/show_bug.cgi?id=1969265; https://access.redhat.com/security/cve/CVE-2021-3589
CVE: CVE-2021-3618
Published: 2022-03-23
Description: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: https://alpaca-attack.com/; https://bugzilla.redhat.com/show_bug.cgi?id=1975623; https://lists.debian.org/debian-lts-announce/2022/11/msg00031.html
CVE: CVE-2021-3748
Published: 2022-03-23
Description: A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1998514; https://github.com/qemu/qemu/commit/bedd7e93d01961fcb16a97ae45d93acf357e11f6; https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html
CVE: CVE-2021-4148
Published: 2022-03-23
Description: A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service (DOS) problem.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-354, CWE-354
References: https://bugzilla.redhat.com/show_bug.cgi?id=2026487; https://lkml.org/lkml/2021/9/12/323; https://lkml.org/lkml/2021/9/17/1037
CVE: CVE-2021-4149
Published: 2022-03-23
Description: A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667, CWE-667
References: https://bugzilla.redhat.com/show_bug.cgi?id=2026485; https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html; https://lkml.org/lkml/2021/10/18/885
CVE: CVE-2021-4150
Published: 2022-03-23
Description: A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when device_add call fails when adding a partition to the disk.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2025938; https://lkml.org/lkml/2021/10/18/485; https://lkml.org/lkml/2021/9/6/781
CVE: CVE-2021-4156
Published: 2022-03-23
Description: An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=2027690; https://github.com/libsndfile/libsndfile/issues/731; https://github.com/libsndfile/libsndfile/pull/732/commits/4c30646abf7834e406f7e2429c70bc254e18beab
CVE: CVE-2021-4180
Published: 2022-03-23
Description: An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://bugzilla.redhat.com/show_bug.cgi?id=2035793; https://bugzilla.redhat.com/show_bug.cgi?id=2035793
CVE: CVE-2021-4197
Published: 2022-03-23
Description: An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287, CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=2035652; https://lore.kernel.org/lkml/[PII_REDACTED]4707.805617-1-tj%40kernel.org/T/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-4219
Published: 2022-03-23
Description: A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=2054611; https://bugzilla.redhat.com/show_bug.cgi?id=2054611
CVE: CVE-2022-0750
Published: 2022-03-23
Description: The Photoswipe Masonry Gallery WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the thumbnail_width, thumbnail_height, max_image_width, and max_image_height parameters  found in the ~/photoswipe-masonry.php file which allows authenticated attackers to inject arbitrary web scripts into galleries created by the plugin and on the PhotoSwipe Options page. This affects versions up to and including 1.2.14.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: https://wordpress.org/plugins/photoswipe-masonry/; https://www.wordfence.com/blog/2022/02/stored-cross-site-scripting-vulnerability-patched-in-a-wordpress-photo-gallery-plugin/; https://www.wordfence.com/threat-intel/vulnerabilities/id/64624d4c-3ffb-4516-a938-0accde24c79f?source=cve
CVE: CVE-2022-0834
Published: 2022-03-23
Description: The Amelia WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the lastName parameter found in the ~/src/Application/Controller/User/Customer/AddCustomerController.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user accesses the booking calendar with the date the attacker has injected the malicious payload into. This affects versions up to and including 1.0.46.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.wordfence.com/threat-intel/vulnerabilities/id/73f12f22-c0a4-4010-9634-ce[PII_REDACTED]?source=cve; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0834; https://www.wordfence.com/threat-intel/vulnerabilities/id/73f12f22-c0a4-4010-9634-ce[PII_REDACTED]?source=cve
CVE: CVE-2022-0854
Published: 2022-03-23
Description: A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-401
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/kernel/dma/swiotlb.c?h=v5.17-rc8&id=aa6f8dcbab473f3a3c7454b74caa46d36cdc5d13; https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html; https://www.debian.org/security/2022/dsa-5161
CVE: CVE-2022-0888
Published: 2022-03-23
Description: The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://gist.github.com/Xib3rR4dAr/5f0accbbfdee279c68ed144da9cd8607; https://www.wordfence.com/threat-intel/vulnerabilities/id/f00eeaef-f277-481f-9e18-bf1ced0015a0?source=cve; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0888