deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-22580
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Auto IT Biltorvet Dealer Tools biltorvet-dealer-tools allows Stored XSS.This issue affects Biltorvet Dealer Tools: from n/a through <= 1.0.22.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/biltorvet-dealer-tools/vulnerability/wordpress-biltorvet-dealer-tools-plugin-1-0-22-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22581
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bytephp Arcade Ready arcadeready allows Stored XSS.This issue affects Arcade Ready: from n/a through <= 1.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/arcadeready/vulnerability/wordpress-arcade-ready-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22582
Published: 2025-01-07
Description: Cross-Site Request Forgery (CSRF) vulnerability in Scott Nelle Uptime Robot uptime-robot allows Stored XSS.This issue affects Uptime Robot: from n/a through <= 0.1.3.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/uptime-robot/vulnerability/wordpress-uptime-robot-plugin-0-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22584
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginsPoint Timeline Pro timeline-pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through <= 1.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/timeline-pro/vulnerability/wordpress-timeline-pro-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22585
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Ultimate Image Hover Effects ultimate-image-hover-effects allows DOM-Based XSS.This issue affects Ultimate Image Hover Effects: from n/a through <= 1.1.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/ultimate-image-hover-effects/vulnerability/wordpress-ultimate-image-hover-effects-plugin-1-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22589
Published: 2025-01-07
Description: Cross-Site Request Forgery (CSRF) vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through <= 0.7.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/quote-tweet/vulnerability/wordpress-quote-tweet-plugin-0-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22590
Published: 2025-01-07
Description: Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Prayer Times Anywhere prayer-times-anywhere allows Stored XSS.This issue affects Prayer Times Anywhere: from n/a through <= 2.0.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/prayer-times-anywhere/vulnerability/wordpress-prayer-times-anywhere-plugin-2-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22591
Published: 2025-01-07
Description: Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 1003 Mortgage Application: from n/a through <= 1.87.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/1003-mortgage-application/vulnerability/wordpress-1003-mortgage-application-plugin-1-87-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-22592
Published: 2025-01-07
Description: Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 1003 Mortgage Application: from n/a through <= 1.87.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/1003-mortgage-application/vulnerability/wordpress-1003-mortgage-application-plugin-1-87-broken-access-control-vulnerability-2?_s_id=cve
CVE: CVE-2025-22593
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in burria Laika Pedigree Tree laika-pedigree-tree allows Stored XSS.This issue affects Laika Pedigree Tree: from n/a through <= 1.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/laika-pedigree-tree/vulnerability/wordpress-laika-pedigree-tree-plugin-1-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2024-12429
Published: 2025-01-07
Description: An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully 
authenticated attacker can use this vulnerability to read system wide files and configuration


All AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch; http://seclists.org/fulldisclosure/2025/Jan/5
CVE: CVE-2024-12430
Published: 2025-01-07
Description: An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 (directory traversal), a successfully authenticated attacker can inject arbitrary commands into a specifically crafted file, which then will be executed by root user.
All AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-280
References: https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch; http://seclists.org/fulldisclosure/2025/Jan/5
CVE: CVE-2024-40747
Published: 2025-01-07
Description: Various module chromes didn't properly process inputs, leading to XSS vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-xss-vectors-in-module-chromes.html
CVE: CVE-2024-40748
Published: 2025-01-07
Description: Lack of output escaping in the id attribute of menu lists.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-xss-vector-in-the-id-attribute-of-menu-lists.html
CVE: CVE-2024-40749
Published: 2025-01-07
Description: Improper Access Controls allows access to protected views.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-read-acl-violation-in-multiple-core-views.html
CVE: CVE-2024-55555
Published: 2025-01-07
Description: Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's repository, that have default APP_KEY values. The route/{hash} route defined in the invoiceninja/routes/client.php file can be accessed without authentication. The parameter {hash} is passed to the function decrypt that expects a Laravel ciphered value containing a serialized object. (Furthermore, Laravel contains several gadget chains usable to trigger remote command execution from arbitrary deserialization.) Therefore, an attacker in possession of the APP_KEY is able to fully control a string passed to an unserialize function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/invoiceninja/invoiceninja/commit/d[PII_REDACTED]c3e7e23bac8c3d5fbec57a5f38f0c; https://www.synacktiv.com/advisories/invoiceninja-unauthenticated-remote-command-execution-when-appkey-known
CVE: CVE-2024-56270
Published: 2025-01-07
Description: Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Retrieve Embedded Sensitive Data.This issue affects WP SecureSubmit: from n/a through <= 1.5.20.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/securesubmit/vulnerability/wordpress-wp-securesubmit-plugin-1-5-16-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2024-56272
Published: 2025-01-07
Description: Missing Authorization vulnerability in ThemeSupport Hide Category by User Role for WooCommerce hide-category-by-user-role-for-woocommerce.This issue affects Hide Category by User Role for WooCommerce: from n/a through <= 2.1.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/hide-category-by-user-role-for-woocommerce/vulnerability/wordpress-hide-category-by-user-role-for-woocommerce-plugin-2-1-1-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-8361
Published: 2025-01-07
Description: In SiWx91x devices, the SHA2/224 algorithm returns a hash of 256 bits instead of 224 bits. This incorrect hash length triggers a software assertion, which subsequently causes a Denial of Service (DoS).
If a watchdog is implemented, device will restart after watch dog expires. If watchdog is not implemented, device can be recovered only after a hard reset
CVSS Score: 7.5 (HIGH)
CWE: CWE-131, CWE-617
References: https://community.silabs.com/068Vm00000I7zqo
CVE: CVE-2025-0299
Published: 2025-01-07
Description: A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /search_result.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://gist.github.com/th4s1s/b30a06e83b98ddcbc69b9038c145d8cd; https://vuldb.com/?ctiid.290448
CVE: CVE-2025-0300
Published: 2025-01-07
Description: A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://gist.github.com/th4s1s/21abb650b4b70fe8392d[PII_REDACTED]f7; https://vuldb.com/?ctiid.290449
CVE: CVE-2025-22296
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hashthemes Hash Elements hash-elements.This issue affects Hash Elements: from n/a through <= 1.5.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/hash-elements/vulnerability/wordpress-hash-elements-plugin-1-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22306
Published: 2025-01-07
Description: Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Spencer Haws Link Whisper Free link-whisper.This issue affects Link Whisper Free: from n/a through <= 0.7.7.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-538
References: https://patchstack.com/database/Wordpress/Plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-7-7-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2025-22319
Published: 2025-01-07
Description: Missing Authorization vulnerability in DearHive Social Media Share Buttons | MashShare.This issue affects Social Media Share Buttons | MashShare: from n/a through 4.0.47.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/wordpress/plugin/mashsharer/vulnerability/wordpress-mashshare-plugin-4-0-47-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-22334
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FilaThemes Education LMS allows Stored XSS.This issue affects Education LMS: from n/a through 0.0.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/wordpress/theme/education-lms/vulnerability/wordpress-education-lms-theme-0-0-7-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22350
Published: 2025-01-07
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpIndeed Ultimate Learning Pro allows SQL Injection.This issue affects Ultimate Learning Pro: from n/a through 3.9.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/wordpress/plugin/indeed-learning-pro/vulnerability/wordpress-indeed-ultimate-learning-pro-plugin-3-9-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2025-22354
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Code Themes Digi Store allows DOM-Based XSS.This issue affects Digi Store: from n/a through 1.1.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/wordpress/theme/digi-store/vulnerability/wordpress-digi-store-theme-1-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22363
Published: 2025-01-07
Description: Missing Authorization vulnerability in Hermann LAHAMI Allada T-shirt Designer for Woocommerce allada-tshirt-designer-for-woocommerce.This issue affects Allada T-shirt Designer for Woocommerce: from n/a through <= 1.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/allada-tshirt-designer-for-woocommerce/vulnerability/wordpress-allada-t-shirt-designer-for-woocommerce-plugin-1-1-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-22365
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric McNiece EMC2 Alert Boxes allows Stored XSS.This issue affects EMC2 Alert Boxes: from n/a through 1.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/wordpress/plugin/emc2-alert-boxes/vulnerability/wordpress-emc2-alert-boxes-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22500
Published: 2025-01-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ali Ali Alpha Price Table For Elementor alpha-price-table-for-elementor allows DOM-Based XSS.This issue affects Alpha Price Table For Elementor: from n/a through <= 1.2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/alpha-price-table-for-elementor/vulnerability/wordpress-alpha-price-table-for-elementor-plugin-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-22621
Published: 2025-01-07
Description: In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the `admin_all_objects` capability to the `splunk_app_soar` role. This addition could lead to improper access control for a low-privileged user that does not hold the "admin"  Splunk roles.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-269
References: https://advisory.splunk.com/advisories/SVD-2025-0101
CVE: CVE-2024-44450
Published: 2025-01-07
Description: Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 #190.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-639
References: https://gist.github.com/BottleOfScotch/85e4c6e1d90060ddebd80b8384d59346
CVE: CVE-2024-50658
Published: 2025-01-07
Description: Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://adportal.com; http://ipublish.com; https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf
CVE: CVE-2024-50659
Published: 2025-01-07
Description: Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://adportal.com; http://ipublish.com; https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf
CVE: CVE-2024-50660
Published: 2025-01-07
Description: File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://adportal.com; http://ipublish.com; https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf
CVE: CVE-2024-54006
Published: 2025-01-07
Description: Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged user on the underlying operating system. Exploitation requires administrative authentication credentials on the host system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04763en_us&docLocale=en_US
CVE: CVE-2024-54007
Published: 2025-01-07
Description: Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged user on the underlying operating system. Exploitation requires administrative authentication credentials on the host system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04763en_us&docLocale=en_US
CVE: CVE-2024-55410
Published: 2025-01-07
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-55411
Published: 2025-01-07
Description: An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55411/CVE-2024-55411_snxpcamd.sys_README.md; https://www.sunix.com/tw/
CVE: CVE-2024-55412
Published: 2025-01-07
Description: A vulnerability exits in driver snxpsamd.sys in SUNIX Serial Driver x64 - 10.1.0.0, which allows low-privileged users to read and write arbitary i/o port via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55412/CVE-2024-55412_snxpsamd.sys_README.md; https://www.sunix.com/tw/
CVE: CVE-2024-55413
Published: 2025-01-07
Description: A vulnerability exits in driver snxppamd.sys in SUNIX Parallel Driver x64 - 10.1.0.0, which allows low-privileged users to read and write arbitary i/o port via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55413/CVE-2024-55413_snxppamd.sys_README.md; https://www.sunix.com/tw/
CVE: CVE-2024-55414
Published: 2025-01-07
Description: A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which allows low-privileged users to mapping physical memory via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55414/CVE-2024-55414_SmSerl64.sys_README.md; https://us.motorola.com/
CVE: CVE-2025-0301
Published: 2025-01-07
Description: A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by this issue is some unknown functionality of the file /subcat.php. The manipulation of the argument catnm leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://gist.github.com/th4s1s/03262c6ce877137b61d745a2e4fe8a63; https://vuldb.com/?ctiid.290450
CVE: CVE-2024-40427
Published: 2025-01-07
Description: Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute
CVSS Score: 7.9 (HIGH)
CWE: CWE-120
References: https://github.com/PX4/PX4-Autopilot/commit/e03e0261a1a0c82f545e66a1e3795956c886db71; https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-55wq-2hgm-75m4; https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-55wq-2hgm-75m4
CVE: CVE-2022-41572
Published: 2025-01-07
Description: An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://github.com/EyesOfNetworkCommunity/eonweb/issues/120; https://github.com/Orange-Cyberdefense/CVE-repository/
CVE: CVE-2022-41573
Published: 2025-01-07
Description: An issue was discovered in Ovidentia 8.3. The file upload feature does not prevent the uploading of executable files. A user can upload a .png file containing PHP code and then rename it to have the .php extension. It will then be accessible at an images/common/ URI for remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://bitbucket.org/cantico/ovidentia/branches/; https://github.com/Orange-Cyberdefense/CVE-repository/; https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_CVE-2022-41573.txt
CVE: CVE-2022-45185
Published: 2025-01-07
Description: An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://docs.suitecrm.com/admin/releases/7.12.x/; https://github.com/Orange-Cyberdefense/CVE-repository/; https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.py
CVE: CVE-2022-45186
Published: 2025-01-07
Description: An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database.
CVSS Score: 8.1 (HIGH)
References: https://docs.suitecrm.com/admin/releases/7.12.x/; https://github.com/Orange-Cyberdefense/CVE-repository/; https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.py
CVE: CVE-2024-35532
Published: 2025-01-07
Description: An XML External Entity (XXE) injection vulnerability in Intersec Geosafe-ea 2022.12, 2022.13, and 2022.14 allows attackers to perform arbitrary file reading under the privileges of the running process, make SSRF requests, or cause a Denial of Service (DoS) via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2024-35532.pdf; https://intersec.com/public-safety