deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-44537
Published: 2022-01-15
Description: ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STKTSNYBZPXBGJOCDAMCZPRXJLAYGDMO/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TSZNJFGM66LJONBQFYYQL4GD5XI5QO2Y/; https://owncloud.com/security-advisories/cve-2021-44537/
CVE: CVE-2022-0238
Published: 2022-01-16
Description: phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/phoronix-test-suite/phoronix-test-suite/commit/5755b3bf979cd04caa6feee07e403a5be5ac320e; https://huntr.dev/bounties/63f24b24-4af2-47b8-baea-7ad5f4db3633; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/57V2CSFU5MKWKL6RJUKMXSD4PCRFTMMQ/
CVE: CVE-2022-0235
Published: 2022-01-16
Description: node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-200, CWE-601
References: https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf; https://github.com/node-fetch/node-fetch/commit/36e47e8a[PII_REDACTED]e4985dcbeff140d73eaa10; https://huntr.dev/bounties/d26ab655-38d6-48b3-be15-f9ad6b6ae6f7
CVE: CVE-2021-4170
Published: 2022-01-16
Description: calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/janeczku/calibre-web/commit/7ad419dc8c12180e842a82118f4866ac3d074bc5; https://huntr.dev/bounties/ff395101-e392-401d-ab4f-579c63fbf6a0; https://github.com/janeczku/calibre-web/commit/7ad419dc8c12180e842a82118f4866ac3d074bc5
CVE: CVE-2022-23303
Published: 2022-01-17
Description: The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-203
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPDHU5MV464CZBPX7N2SNMUYP6DFIBZL/; https://security.gentoo.org/glsa/202309-16; https://w1.fi/security/2022-1/
CVE: CVE-2022-23304
Published: 2022-01-17
Description: The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-203
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPDHU5MV464CZBPX7N2SNMUYP6DFIBZL/; https://security.gentoo.org/glsa/202309-16; https://w1.fi/security/2022-1/
CVE: CVE-2022-0239
Published: 2022-01-17
Description: corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://github.com/stanfordnlp/corenlp/commit/1940ffb938dc4f3f5bc5f2a2fd8b35aabbbae3dd; https://huntr.dev/bounties/a717aec2-5646-4a5f-ade0-dadc25736ae3; https://github.com/stanfordnlp/corenlp/commit/1940ffb938dc4f3f5bc5f2a2fd8b35aabbbae3dd
CVE: CVE-2021-4171
Published: 2022-01-17
Description: calibre-web is vulnerable to Business Logic Errors
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-840
References: https://github.com/janeczku/calibre-web/commit/3e0d8763c377d[PII_REDACTED]e3e4ccf13f0d312ce; https://huntr.dev/bounties/1117f439-133c-4563-afb2-6cd80607bd5c; https://github.com/janeczku/calibre-web/commit/3e0d8763c377d[PII_REDACTED]e3e4ccf13f0d312ce
CVE: CVE-2022-0131
Published: 2022-01-17
Description: Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
CVSS Score: 3.3 (LOW)
CWE: CWE-798
References: https://jvn.jp/en/jp/JVN49047921/index.html; https://jvn.jp/en/jp/JVN49047921/index.html
CVE: CVE-2022-0180
Published: 2022-01-17
Description: Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN72788165/index.html; https://quizandsurveymaster.com/; https://wordpress.org/plugins/quiz-master-next/
CVE: CVE-2022-0181
Published: 2022-01-17
Description: Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN72788165/index.html; https://quizandsurveymaster.com/; https://wordpress.org/plugins/quiz-master-next/
CVE: CVE-2022-0182
Published: 2022-01-17
Description: Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary script via an website that uses Quiz And Survey Master.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN72788165/index.html; https://quizandsurveymaster.com/; https://wordpress.org/plugins/quiz-master-next/
CVE: CVE-2022-0183
Published: 2022-01-17
Description: Missing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions allows an attacker who can physically access the device to obtain the stored passwords.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-311
References: https://jvn.jp/en/jp/JVN19826500/index.html; https://www.kingjim.co.jp/download/security/#mirupass; https://jvn.jp/en/jp/JVN19826500/index.html
CVE: CVE-2022-0184
Published: 2022-01-17
Description: Insufficiently protected credentials vulnerability in 'TEPRA' PRO SR5900P Ver.1.080 and earlier and 'TEPRA' PRO SR-R7900P Ver.1.030 and earlier allows an attacker on the adjacent network to obtain credentials for connecting to the Wi-Fi access point with the infrastructure mode.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: https://jvn.jp/en/jp/JVN81479705/index.html; https://www.kingjim.co.jp/download/security/#sr01; https://jvn.jp/en/jp/JVN81479705/index.html
CVE: CVE-2021-3853
Published: 2022-01-17
Description: chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/chaskiq/chaskiq/commit/51768b21632dac89fd0dedb2b3b6d91bac732345; https://huntr.dev/bounties/2b6a7647-8f2b-4510-b40f-c52aedc2820d; https://github.com/chaskiq/chaskiq/commit/51768b21632dac89fd0dedb2b3b6d91bac732345
CVE: CVE-2021-3857
Published: 2022-01-17
Description: chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/chaskiq/chaskiq/commit/bffa585862b11cc05229ab3ed621d68f70ed33d0; https://huntr.dev/bounties/18f7eaee-6309-40cb-aed3-d5ac0af03cf3; https://github.com/chaskiq/chaskiq/commit/bffa585862b11cc05229ab3ed621d68f70ed33d0
CVE: CVE-2021-24838
Published: 2022-01-17
Description: The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/562e81ad-7422-4437-a5b4-fcab9379db82; https://wpscan.com/vulnerability/562e81ad-7422-4437-a5b4-fcab9379db82
CVE: CVE-2021-24909
Published: 2022-01-17
Description: The ACF Photo Gallery Field WordPress plugin before 1.7.5 does not sanitise and escape the post parameter in the includes/acf_photo_gallery_metabox_edit.php file before outputing back in an attribute, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5855f1fe-28f6-4cd6-a83c-95c23d809b79; https://wpscan.com/vulnerability/5855f1fe-28f6-4cd6-a83c-95c23d809b79
CVE: CVE-2021-25005
Published: 2022-01-17
Description: The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/af7d62ca-09b3-41c8-b771-be936ce8f6b2; https://wpscan.com/vulnerability/af7d62ca-09b3-41c8-b771-be936ce8f6b2
CVE: CVE-2021-25024
Published: 2022-01-17
Description: The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/08864b76-d898-4dfe-970d-d7cc1b1115a7; https://wpscan.com/vulnerability/08864b76-d898-4dfe-970d-d7cc1b1115a7
CVE: CVE-2021-25025
Published: 2022-01-17
Description: The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/24fb4eb4-9fe1-4433-8844-8904eaf13c0e; https://wpscan.com/vulnerability/24fb4eb4-9fe1-4433-8844-8904eaf13c0e
CVE: CVE-2021-25036
Published: 2022-01-17
Description: The All in One SEO WordPress plugin before 4.1.5.3 is affected by a Privilege Escalation issue, which was discovered during an internal audit by the Jetpack Scan team, and may grant bad actors access to protected REST API endpoints they shouldn’t have access to. This could ultimately enable users with low-privileged accounts, like subscribers, to perform remote code execution on affected sites.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-178
References: https://jetpack.com/2021/12/14/severe-vulnerabilities-fixed-in-all-in-one-seo-plugin-version-4-1-5-3/; https://plugins.trac.wordpress.org/changeset/2640944/all-in-one-seo-pack/trunk/app/Common/Api/Api.php; https://wpscan.com/vulnerability/6de4a7de-6b71-4349-8e52-04c89c5e6d6c
CVE: CVE-2021-25037
Published: 2022-01-17
Description: The All in One SEO WordPress plugin before 4.1.5.3 is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Jetpack Scan team, and could grant attackers access to privileged information from the affected site’s database (e.g., usernames and hashed passwords).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://jetpack.com/2021/12/14/severe-vulnerabilities-fixed-in-all-in-one-seo-plugin-version-4-1-5-3/; https://plugins.trac.wordpress.org/changeset/2640944/all-in-one-seo-pack/trunk/app/Common/Api/PostsTerms.php; https://wpscan.com/vulnerability/4cd2a57b-3e1a-4acf-aecb-201ed9f4ee6d
CVE: CVE-2021-25046
Published: 2022-01-17
Description: The Modern Events Calendar Lite WordPress plugin before 6.2.0 alloed any logged-in user, even a subscriber user, may add a category whose parameters are incorrectly escaped in the admin panel, leading to stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/19c2f456-a41e-4755-912d-13683719bae6; https://wpscan.com/vulnerability/19c2f456-a41e-4755-912d-13683719bae6
CVE: CVE-2021-25061
Published: 2022-01-17
Description: The WP Booking System WordPress plugin before 2.0.15 was affected by a reflected xss in wp-booking-system on the wpbs-calendars admin page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2643776/wp-booking-system; https://wpscan.com/vulnerability/bd9dc754-08a4-4bfc-8dda-3f5c0e070f7e; https://plugins.trac.wordpress.org/changeset/2643776/wp-booking-system
CVE: CVE-2021-25065
Published: 2022-01-17
Description: The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ae1aab4e-b00a-458b-a[PII_REDACTED]5bdcc; https://wpscan.com/vulnerability/ae1aab4e-b00a-458b-a[PII_REDACTED]5bdcc
CVE: CVE-2021-25067
Published: 2022-01-17
Description: The Landing Page Builder WordPress plugin before 1.4.9.6 was affected by a reflected XSS in page-builder-add on the ulpb_post admin page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/365007f0-61ac-4e81-8a3a-3a068f2c84bc; https://wpscan.com/vulnerability/365007f0-61ac-4e81-8a3a-3a068f2c84bc
CVE: CVE-2021-4164
Published: 2022-01-17
Description: calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/janeczku/calibre-web/commit/785726deee13b4d56f6c3503dd57c1e3eb7d6f30; https://huntr.dev/bounties/2debace1-a0f3-45c1-95fa-9d[PII_REDACTED]; https://github.com/janeczku/calibre-web/commit/785726deee13b4d56f6c3503dd57c1e3eb7d6f30
CVE: CVE-2021-3862
Published: 2022-01-17
Description: icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/icecoder/icecoder/commit/51cf24b2a39138e6a7b5739ef59eb38cd7c39763; https://huntr.dev/bounties/5c9c228e-2a39-4643-bb82-2b02a2b0a601; https://github.com/icecoder/icecoder/commit/51cf24b2a39138e6a7b5739ef59eb38cd7c39763
CVE: CVE-2022-0240
Published: 2022-01-17
Description: mruby is vulnerable to NULL Pointer Dereference
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/mruby/mruby/commit/31fa3304049fc406a201a72293cce140f0557dca; https://huntr.dev/bounties/5857eced-aad9-417d-864e-0bdf17226cbb; https://github.com/mruby/mruby/commit/31fa3304049fc406a201a72293cce140f0557dca
CVE: CVE-2022-0253
Published: 2022-01-17
Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/livehelperchat/livehelperchat/commit/407d0b1a1fa56fa6f824a19092774f10f4880437; https://huntr.dev/bounties/ac7f7eba-ee0b-4a50-bd89-29fd9b3e8303; https://github.com/livehelperchat/livehelperchat/commit/407d0b1a1fa56fa6f824a19092774f10f4880437
CVE: CVE-2022-0256
Published: 2022-01-17
Description: pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/dff1cb0c466abcd55f1268934de3ed937b7436a7; https://huntr.dev/bounties/8d88e48a-7124-4aaf-9f1d-6cfe4f9a79c1; https://github.com/pimcore/pimcore/commit/dff1cb0c466abcd55f1268934de3ed937b7436a7
CVE: CVE-2022-0257
Published: 2022-01-17
Description: pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/dfaf78b26fb77990267c0cc05b9fcb9f8de7b66d; https://huntr.dev/bounties/bad2073c-bbd5-4425-b3e9-c336b73ddda6; https://github.com/pimcore/pimcore/commit/dfaf78b26fb77990267c0cc05b9fcb9f8de7b66d
CVE: CVE-2022-0258
Published: 2022-01-17
Description: pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/pimcore/pimcore/commit/66281c12479dc01a06258d8533eaddfb1770d5bd; https://huntr.dev/bounties/0df891e4-6412-4d9a-a9b7-d9df50311802; https://github.com/pimcore/pimcore/commit/66281c12479dc01a06258d8533eaddfb1770d5bd
CVE: CVE-2021-33040
Published: 2022-01-17
Description: managers/views/iframe.js in FuturePress EPub.js before 0.3.89 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/futurepress/epub.js/blob/5c7f21d648d9d20d44c6c365d164b[PII_REDACTED]/src/managers/views/iframe.js#L373; https://github.com/futurepress/epub.js/commit/ab4dd46408cce0324e1c67de4a3ba96b59e5012e; https://github.com/futurepress/epub.js/compare/v0.3.88...v0.3.89
CVE: CVE-2021-38965
Published: 2022-01-17
Description: IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 212346.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/212346; https://www.ibm.com/support/pages/node/6509840; https://exchange.xforce.ibmcloud.com/vulnerabilities/212346
CVE: CVE-2022-0242
Published: 2022-01-17
Description: Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/crater-invoice/crater/commit/dcb3ddecb9f4cde622cc42c51a[PII_REDACTED]624f; https://huntr.dev/bounties/19f3e5f7-b419-44b1-9c37-7e4404cbec94; https://github.com/crater-invoice/crater/commit/dcb3ddecb9f4cde622cc42c51a[PII_REDACTED]624f
CVE: CVE-2021-42357
Published: 2022-01-17
Description: When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be presented to the user outside the normal request flow through a XSS or phishing campaign.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.openwall.com/lists/oss-security/2022/01/17/2; https://lists.apache.org/thread/b7v5dkpyqb51nw0lvz4cybhgrfhk1g7j; http://www.openwall.com/lists/oss-security/2022/01/17/2
CVE: CVE-2022-22703
Published: 2022-01-17
Description: In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://advisories.stormshield.eu/2022-001; https://advisories.stormshield.eu/2022-001
CVE: CVE-2022-0245
Published: 2022-01-18
Description: Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/livehelperchat/livehelperchat/commit/c2fa19afeb8b1ea927fea3fd452515c95f289fb9; https://huntr.dev/bounties/6a6aca72-32b7-45b3-a8ba-9b400b2d669c; https://github.com/livehelperchat/livehelperchat/commit/c2fa19afeb8b1ea927fea3fd452515c95f289fb9
CVE: CVE-2021-44757
Published: 2022-01-18
Description: Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication, and read sensitive information or upload an arbitrary ZIP archive to the server.
CVSS Score: 9.1 (CRITICAL)
References: https://pitstop.manageengine.com/portal/en/community/topic/a-critical-security-patch-released-in-desktop-central-and-desktop-central-msp-for-cve-2021-44757-17-1-2022; https://pitstop.manageengine.com/portal/en/community/topic/a-critical-security-patch-released-in-desktop-central-and-desktop-central-msp-for-cve-2021-44757-17-1-2022
CVE: CVE-2021-33964
Published: 2022-01-18
Description: China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://iot.10086.cn/?l=en-us; https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection11.md; https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520
CVE: CVE-2021-45394
Published: 2022-01-18
Description: An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious <link> tag in the converted HTML document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-918
References: https://github.com/spipu/html2pdf; https://github.com/spipu/html2pdf/blob/master/CHANGELOG.md; https://www.synacktiv.com/sites/default/files/2022-01/html2pdf_ssrf_deserialization.pdf
CVE: CVE-2021-33965
Published: 2022-01-18
Description: China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://iot.10086.cn/?l=en-us; https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection10.md; https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520
CVE: CVE-2021-38783
Published: 2022-01-18
Description: There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedar_dev" through iotcl cmd IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO, which could cause a system crash or EoP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9ACamera%20Driver%20has%20Out-Of-Bound%20Write%20Vulnerability.md; https://vul.wangan.com/a/CNVD-2021-49168; https://www.allwinnertech.com/index.php?c=product&a=index&id=92
CVE: CVE-2021-22566
Published: 2022-01-18
Description: An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits within mmu_flags_to_s1_pte_attr lead to unprivileged executable pages being mapped as executable from a privileged context. This can be leveraged by an attacker to bypass executability restrictions of user-mode pages from kernel-mode. Typically this allows a potential attacker to circumvent a mitigation, making exploitation of potential kernel-mode vulnerabilities easier. We recommend updating kernel beyond commit 7d731b4e9599088ac[PII_REDACTED]559da7bca6a00 and rebuilding.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-275, CWE-732
References: https://fuchsia.googlesource.com/fuchsia/+/7d731b4e9599088ac[PII_REDACTED]559da7bca6a00; https://fuchsia.googlesource.com/fuchsia/+/7d731b4e9599088ac[PII_REDACTED]559da7bca6a00
CVE: CVE-2021-38694
Published: 2022-01-18
Description: SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.infoma.net/index.php/saraban/; https://orangeo.tech/post/2021/12/24/First-CVEs.html; https://play.google.com/store/apps/details?id=th.co.softvibe.saraban&hl=en&gl=US
CVE: CVE-2021-38784
Published: 2022-01-18
Description: There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9ASyscall%20open_exec%20has%20Null%20Pointer%20Dereference%20Vulnerability.md; https://vul.wangan.com/a/CNVD-2021-49172; https://www.allwinnertech.com/index.php?c=product&a=index&id=92
CVE: CVE-2021-38785
Published: 2022-01-18
Description: There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR to cause a system crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9ACamera%20Driver%20has%20Null%20Pointer%20Dereference%20Vulnerability.md; https://vul.wangan.com/a/CNVD-2021-49170; https://www.allwinnertech.com/index.php?c=product&a=index&id=92