deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30417
Published: 2022-05-13
Description: Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manage_user&id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-6.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/covid-19-travel-pass-management-system/SQLi-6.md
CVE: CVE-2021-27505
Published: 2022-05-13
Description: mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-548
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03; https://www.myscada.org/version-8-20-0-released-security-update; https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03
CVE: CVE-2021-33005
Published: 2022-05-13
Description: mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03; https://www.myscada.org/version-8-20-0-released-security-update; https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03
CVE: CVE-2021-33009
Published: 2022-05-13
Description: mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03; https://www.myscada.org/version-8-20-0-released-security-update; https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03
CVE: CVE-2021-33013
Published: 2022-05-13
Description: mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284, CWE-862
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03; https://www.myscada.org/version-8-20-0-released-security-update; https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03
CVE: CVE-2022-22252
Published: 2022-05-13
Description: The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2022/4/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202204-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/4/
CVE: CVE-2022-29433
Published: 2022-05-13
Description: Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin <= 1.8 on WordPress.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/nd-donations/; https://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-1715
Published: 2022-05-13
Description: Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1125
References: https://github.com/neorazorx/facturascripts/commit/714bebf4c35e3eedda138f5ee912a8031bc8b1ab; https://huntr.dev/bounties/58918962-ccb5-47f9-bb43-ffd8cae1ef24; https://github.com/neorazorx/facturascripts/commit/714bebf4c35e3eedda138f5ee912a8031bc8b1ab
CVE: CVE-2022-22325
Published: 2022-05-13
Description: IBM MQ (IBM MQ for HPE NonStop 8.1.0) can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Force ID: 218853.
CVSS Score: 5.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/218853; https://www.ibm.com/support/pages/node/6585780; https://exchange.xforce.ibmcloud.com/vulnerabilities/218853
CVE: CVE-2022-22393
Published: 2022-05-13
Description: IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP/HTTPS ports which are accessible by the application server. IBM X-Force ID: 222078.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/222078; https://www.ibm.com/support/pages/node/6585704; https://exchange.xforce.ibmcloud.com/vulnerabilities/222078
CVE: CVE-2022-1701
Published: 2022-05-13
Description: SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-321, CWE-798
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009
CVE: CVE-2022-1702
Published: 2022-05-13
Description: SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses that link in a redirect which leads to Open redirection vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009
CVE: CVE-2022-21190
Published: 2022-05-13
Description: This affects the package convict before 6.2.3. This is a bypass of [CVE-2022-22143](https://security.snyk.io/vuln/SNYK-JS-CONVICT-2340604). The [fix](https://github.com/mozilla/node-convict/commit/3b86be087d8f14681a9c889d45da7fe3ad9cd880) introduced, relies on the startsWith method and does not prevent the vulnerability: before splitting the path, it checks if it starts with __proto__ or this.constructor.prototype. To bypass this check it's possible to prepend the dangerous paths with any string value followed by a dot, like for example foo.__proto__ or foo.this.constructor.prototype.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://gist.github.com/dellalibera/cebce20e51410acebff1f46afdc89808; https://github.com/mozilla/node-convict/blob/3b86be087d8f14681a9c889d45da7fe3ad9cd880/packages/convict/src/main.js%23L571; https://github.com/mozilla/node-convict/blob/master/CHANGELOG.md%23623---2022-05-07
CVE: CVE-2022-22281
Published: 2022-05-13
Description: A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to potentially execute arbitrary code in the host windows operating system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-120
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0008; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0008
CVE: CVE-2022-22282
Published: 2022-05-13
Description: SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009
CVE: CVE-2022-25862
Published: 2022-05-13
Description: This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. **Note:** This vulnerability derives from an incomplete fix to [CVE-2020-7618](https://security.snyk.io/vuln/SNYK-JS-SDS-564123)
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-1321
References: https://github.com/monsterkodi/sds/blob/master/js/set.js; https://snyk.io/vuln/SNYK-JS-SDS-2385944; https://github.com/monsterkodi/sds/blob/master/js/set.js
CVE: CVE-2022-25865
Published: 2022-05-13
Description: The package workspace-tools before 0.18.4 are vulnerable to Command Injection via git argument injection. When calling the fetchRemoteBranch(remote: string, remoteBranch: string, cwd: string) function, both the remote and remoteBranch parameters are passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.
CVSS Score: 8.1 (HIGH)
CWE: CWE-88
References: https://github.com/microsoft/workspace-tools/commit/9bc7e65ce497f87e1f363fd47b8f802f3d3cd978; https://github.com/microsoft/workspace-tools/pull/103; https://snyk.io/vuln/SNYK-JS-WORKSPACETOOLS-2421201
CVE: CVE-2022-24830
Published: 2022-05-14
Description: OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). OpenClinica prior to version 3.16 is vulnerable to path traversal in multiple endpoints, leading to arbitrary file read/write, and potential remote code execution. There are no known workarounds. This issue has been patched and users are recommended to upgrade.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/OpenClinica/OpenClinica/commit/6f864e86543f903bd20d6f9fc[PII_REDACTED]441f3; https://github.com/OpenClinica/OpenClinica/security/advisories/GHSA-9rrv-prff-qph7; https://github.com/OpenClinica/OpenClinica/commit/6f864e86543f903bd20d6f9fc[PII_REDACTED]441f3
CVE: CVE-2022-24831
Published: 2022-05-14
Description: OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). Versions prior to 3.16.1 are vulnerable to SQL injection due to the use of string concatenation to create SQL queries instead of prepared statements. No known workarounds exist. This issue has been patched in 3.16.1, 3.15.9, 3.14.1, and 3.13.1 and users are advised to upgrade.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/OpenClinica/OpenClinica/pull/3490/commits/b152cc63019230c9973965a98e4386ea5322c18f; https://github.com/OpenClinica/OpenClinica/security/advisories/GHSA-5289-4jwp-xp9h; https://github.com/OpenClinica/OpenClinica/pull/3490/commits/b152cc63019230c9973965a98e4386ea5322c18f
CVE: CVE-2022-1379
Published: 2022-05-14
Description: URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery (SSRF). This allows accessing restricted internal resources/servers or sending requests to third party servers.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/plantuml/plantuml/commit/93e5964e5f35914f3f7b89de620c[PII_REDACTED]83; https://huntr.dev/bounties/0d737527-86e1-41d1-9d37-b2de36bc063a; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHUE4G5CAJUD7L2QPJF6U4JYQTP7CNNL/
CVE: CVE-2022-30708
Published: 2022-05-15
Description: Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created (i.e., not created in Virtualmin or Cloudmin). This occurs because settings-editor_write.cgi does not properly restrict the file parameter.
CVSS Score: 8.8 (HIGH)
References: https://github.com/esp0xdeadbeef/rce_webmin; https://github.com/esp0xdeadbeef/rce_webmin/blob/main/exploit.py; https://github.com/webmin/authentic-theme/releases
CVE: CVE-2021-41965
Published: 2022-05-15
Description: A SQL injection vulnerability exists in ChurchCRM version 2.0.0 to 4.4.5 that allows an authenticated attacker to issue an arbitrary SQL command to the database through the unsanitized EN_tyid, theID and EID fields used when an Edit action on an existing record is being performed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://churchcrm.io/; https://www.alexbilz.com/post/2022-05-14-cve-2021-41965/; https://churchcrm.io/
CVE: CVE-2022-28929
Published: 2022-05-15
Description: Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cyberhomeless/vulnerabilitys/tree/main/HMS; https://github.com/cyberhomeless/vulnerabilitys/tree/main/HMS
CVE: CVE-2022-28936
Published: 2022-05-15
Description: FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node can trigger an integer overflow and cause a Denial of Service (DoS) via an unusually large viewchange message packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2307; https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2307
CVE: CVE-2022-28937
Published: 2022-05-15
Description: FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an invalid proposal with an invalid header, will cause normal nodes to stop producing new blocks and processing new clients' requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2312; https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2312
CVE: CVE-2022-28930
Published: 2022-05-15
Description: ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml..
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gitee.com/doc_wei01/erp-pro/issues/I515R4; https://gitee.com/doc_wei01/erp-pro/issues/I515R4
CVE: CVE-2022-30049
Published: 2022-05-15
Description: A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/getrebuild/rebuild/issues/460; https://github.com/getrebuild/rebuild/issues/460
CVE: CVE-2022-30765
Published: 2022-05-16
Description: Calibre-Web before 0.6.18 allows user table SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/janeczku/calibre-web/blob/master/SECURITY.md; https://github.com/janeczku/calibre-web/releases/tag/0.6.18; https://github.com/janeczku/calibre-web/blob/master/SECURITY.md
CVE: CVE-2022-30763
Published: 2022-05-16
Description: Janet before 1.22.0 mishandles arrays.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://blog.convisoappsec.com/en/bug-hunting-in-the-janet-language-interpreter/; https://github.com/janet-lang/janet/compare/v1.21.1...v1.22.0; https://github.com/janet-lang/janet/releases/tag/v1.22.0
CVE: CVE-2022-30767
Published: 2022-05-16
Description: nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/u-boot/u-boot/commit/5d14ee4e53a81055d34ba280cb8fd90330f22a96; https://lists.denx.de/pipermail/u-boot/2022-May/483952.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/
CVE: CVE-2022-30770
Published: 2022-05-16
Description: Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnerability that could be exploited by an attacker to mislead an administrator and steal their credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bulletproofsi.com/wp-content/uploads/2022/08/Bulletproof_Vuls_Id_2022-30770.pdf; https://bulletproofsi.com/wp-content/uploads/2022/10/Bulletproof_Vuls_Id_CVE-2022-30770.pdf; https://docs.terminalfour.com/release-notes/82/1821.html
CVE: CVE-2022-30775
Published: 2022-05-16
Description: xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKE_CXX_COMPILER=afl-clang-fast++ option.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=42264; https://forum.xpdfreader.com/viewtopic.php?f=3&t=42264
CVE: CVE-2022-30778
Published: 2022-05-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-30779
Published: 2022-05-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-30781
Published: 2022-05-16
Description: Gitea before 1.16.7 does not escape git fetch remote.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: http://packetstormsecurity.com/files/168400/Gitea-1.16.6-Remote-Code-Execution.html; http://packetstormsecurity.com/files/169928/Gitea-Git-Fetch-Remote-Code-Execution.html; https://blog.gitea.io/2022/05/gitea-1.16.7-is-released/
CVE: CVE-2022-29586
Published: 2022-05-16
Description: Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.
CVSS Score: 7.4 (HIGH)
References: https://sec-consult.com/vulnerability-lab/; https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/; https://sec-consult.com/vulnerability-lab/
CVE: CVE-2022-29587
Published: 2022-05-16
Description: Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-269
References: https://sec-consult.com/vulnerability-lab/; https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/; https://sec-consult.com/vulnerability-lab/
CVE: CVE-2022-29588
Published: 2022-05-16
Description: Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://packetstormsecurity.com/files/167166/Konica-Minolta-bizhub-MFP-Printer-Terminal-Sandbox-Escape.html; https://sec-consult.com/vulnerability-lab/; http://packetstormsecurity.com/files/167166/Konica-Minolta-bizhub-MFP-Printer-Terminal-Sandbox-Escape.html
CVE: CVE-2022-30782
Published: 2022-05-16
Description: Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Math/random; https://github.com/openmoney/openmoney-api/blob/1b836e5826dfd59145223a8a48e6c45ddb325762/api/helpers/util.helper.js#L6; https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Math/random
CVE: CVE-2022-30011
Published: 2022-05-16
Description: In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kabirkhyrul/HMS/discussions/15; https://github.com/kabirkhyrul/HMS/tree/1.0; https://github.com/kabirkhyrul/HMS/discussions/15
CVE: CVE-2022-30012
Published: 2022-05-16
Description: In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/kabirkhyrul/HMS/discussions/15; https://github.com/kabirkhyrul/HMS/tree/1.0; https://github.com/kabirkhyrul/HMS/discussions/15
CVE: CVE-2021-41927
Published: 2022-05-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-42870
Published: 2022-05-16
Description: ACCEL-PPP 1.12.0 has an out-of-bounds read in post_msg when processing a call_clear_request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/xebd/accel-ppp/issues/158; https://github.com/xebd/accel-ppp/issues/158
CVE: CVE-2021-42897
Published: 2022-05-16
Description: A remote command execution (RCE) vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $_POST[r_name] is directly passed into the $mysqlstr and is executed by exec.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/FeMiner/wms/issues/12; https://github.com/FeMiner/wms/issues/12
CVE: CVE-2021-42966
Published: 2022-05-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-29017
Published: 2022-05-16
Description: Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x86_64/multiarch/strlen-avx2.S.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://github.com/axiomatic-systems/Bento4/issues/691; https://github.com/axiomatic-systems/Bento4/issues/691
CVE: CVE-2022-29351
Published: 2022-05-16
Description: An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://tiddlywiki5.com; https://github.com/Jermolene/TiddlyWiki5; https://github.com/jimcola99/corruptsvgfile
CVE: CVE-2022-29353
Published: 2022-05-16
Description: An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://youtu.be/2kHm_henVM4; https://youtu.be/2kHm_henVM4
CVE: CVE-2022-29354
Published: 2022-05-16
Description: An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.youtube.com/watch?v=DOM20FKpQQw; https://www.youtube.com/watch?v=DOM20FKpQQw
CVE: CVE-2022-29622
Published: 2022-05-16
Description: An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrary files is the desired behavior. Also, there are configuration options in all versions that can change the default behavior of how files are handled. Strapi does not consider this to be a valid vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/node-formidable/formidable/issues/856; https://github.com/node-formidable/formidable/issues/862; https://github.com/strapi/strapi/issues/20189
CVE: CVE-2022-29623
Published: 2022-05-16
Description: An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://github.com/expressjs/connect-multiparty/releases/tag/2.2.0; https://www.npmjs.com/package/connect-multiparty; https://www.youtube.com/watch?v=i3xJR-91rrM
CVE: CVE-2022-30013
Published: 2022-05-16
Description: A stored cross-site scripting (XSS) vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/totaljs/framework; https://www.youtube.com/watch?v=E2784z7Bu2c; https://github.com/totaljs/framework
CVE: CVE-2022-30776
Published: 2022-05-16
Description: atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://help.atmail.com/hc/en-us/sections/[PII_REDACTED]8; https://medium.com/%40bhattronit96/cve-2022-30776-cd34f977c2b9; https://help.atmail.com/hc/en-us/sections/[PII_REDACTED]8