deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-23975
Published: 2022-04-18
Description: Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/access-demo-importer/wordpress-access-demo-importer-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability-leading-to-arbitrary-plugin-activation; https://wordpress.org/plugins/access-demo-importer/#developers; https://patchstack.com/database/vulnerability/access-demo-importer/wordpress-access-demo-importer-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability-leading-to-arbitrary-plugin-activation
CVE: CVE-2022-23976
Published: 2022-04-18
Description: Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media).
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/access-demo-importer/wordpress-access-demo-importer-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability-leading-to-data-reset-posts-pages-media; https://wordpress.org/plugins/access-demo-importer/#developers; https://patchstack.com/database/vulnerability/access-demo-importer/wordpress-access-demo-importer-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability-leading-to-data-reset-posts-pages-media
CVE: CVE-2022-25226
Published: 2022-04-18
Description: ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the server.
CVSS Score: 10.0 (CRITICAL)
References: https://fluidattacks.com/advisories/sinatra/; https://fluidattacks.com/advisories/sinatra/
CVE: CVE-2022-27525
Published: 2022-04-18
Description: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE: CVE-2022-27526
Published: 2022-04-18
Description: A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE: CVE-2022-27529
Published: 2022-04-18
Description: A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE: CVE-2022-27530
Published: 2022-04-18
Description: A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE: CVE-2022-27652
Published: 2022-04-18
Description: A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://bugzilla.redhat.com/show_bug.cgi?id=2066839; https://github.com/cri-o/cri-o/security/advisories/GHSA-4hj2-r2pm-3hc6; https://bugzilla.redhat.com/show_bug.cgi?id=2066839
CVE: CVE-2022-27853
Published: 2022-04-18
Description: Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.9
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/contest-gallery/wordpress-contest-gallery-plugin-13-1-0-9-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/contest-gallery/; https://patchstack.com/database/vulnerability/contest-gallery/wordpress-contest-gallery-plugin-13-1-0-9-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2021-25120
Published: 2022-04-18
Description: The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0ad020b5-0d16-4521-8ea7-39cd206ab9f6; https://wpscan.com/vulnerability/0ad020b5-0d16-4521-8ea7-39cd206ab9f6
CVE: CVE-2022-0661
Published: 2022-04-18
Description: The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disallowed, leading to a stored cross-site scripting (XSS) vulnerability. Further it is also possible to inject PHP code, leading to a Remote Code execution (RCE) vulnerability, even if the DISALLOW_FILE_EDIT and DISALLOW_FILE_MOD constants are both set.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://wpscan.com/vulnerability/3c5a7b03-d4c3-46b9-af65-fb50e58b0bfd; https://wpscan.com/vulnerability/3c5a7b03-d4c3-46b9-af65-fb50e58b0bfd
CVE: CVE-2022-0706
Published: 2022-04-18
Description: The Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the Logs, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2697388; https://wpscan.com/vulnerability/598d5c1b-7930-46a6-9a31-5e08a5f14907; https://plugins.trac.wordpress.org/changeset/2697388
CVE: CVE-2022-0707
Published: 2022-04-18
Description: The Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes, which could allow attackers to make a logged admin insert arbitrary notes via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2697388; https://wpscan.com/vulnerability/50680797-61e4-4737-898f-e5b394d89117; https://plugins.trac.wordpress.org/changeset/2697388
CVE: CVE-2022-0737
Published: 2022-04-18
Description: The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a5c9fa61-e6f1-4460-84fe-977a203bd4bc; https://wpscan.com/vulnerability/a5c9fa61-e6f1-4460-84fe-977a203bd4bc
CVE: CVE-2022-0765
Published: 2022-04-18
Description: The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source translation strings before outputting them in the editor in the plugin admin panel, allowing any user with access to the plugin (Translator and Administrator by default) to add arbitrary javascript payloads to the source strings leading to a stored cross-site scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/58838f51-323d-41e0-8c85-8e113dc2c587; https://wpscan.com/vulnerability/58838f51-323d-41e0-8c85-8e113dc2c587
CVE: CVE-2022-0780
Published: 2022-04-18
Description: The SearchIQ WordPress plugin before 3.9 contains a flag to disable the verification of CSRF nonces, granting unauthenticated attackers access to the siq_ajax AJAX action and allowing them to perform Cross-Site Scripting attacks due to the lack of sanitisation and escaping in the customCss parameter
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0ee7d1a8-9782-4db5-b055-e732f2763825; https://wpscan.com/vulnerability/0ee7d1a8-9782-4db5-b055-e732f2763825
CVE: CVE-2022-0785
Published: 2022-04-18
Description: The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the get_monthly_timetable AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/e1e09f56-89a4-4d6f-907b-3fb2cb825255; https://wpscan.com/vulnerability/e1e09f56-89a4-4d6f-907b-3fb2cb825255
CVE: CVE-2022-0879
Published: 2022-04-18
Description: The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c12f6087-1875-4edf-ac32-bec6f712968d; https://wpscan.com/vulnerability/c12f6087-1875-4edf-ac32-bec6f712968d
CVE: CVE-2022-0994
Published: 2022-04-18
Description: The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e9dd62fc-bb79-4a6b-b99c-60e40f010d7a; https://wpscan.com/vulnerability/e9dd62fc-bb79-4a6b-b99c-60e40f010d7a
CVE: CVE-2022-1001
Published: 2022-04-18
Description: The WP Downgrade WordPress plugin before 1.2.3 only perform client side validation of its "WordPress Target Version" settings, but does not sanitise and escape it server side, allowing high privilege users such as admin to perform Cross-Site attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2696091; https://wpscan.com/vulnerability/34a7b3cd-e2b5-4891-ab33-af6a2a0eeceb; https://plugins.trac.wordpress.org/changeset/2696091
CVE: CVE-2022-1020
Published: 2022-04-18
Description: The Product Table for WooCommerce (wooproducttable) WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or one user controlled argument
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/04fe89b3-8ad1-482f-a96d-759d1d3a0dd5; https://wpscan.com/vulnerability/04fe89b3-8ad1-482f-a96d-759d1d3a0dd5
CVE: CVE-2022-1037
Published: 2022-04-18
Description: The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs
CVSS Score: 7.2 (HIGH)
CWE: CWE-918
References: https://wpscan.com/vulnerability/bd8555bd-8086-41d0-a1f7-3557bc3af957; https://wpscan.com/vulnerability/bd8555bd-8086-41d0-a1f7-3557bc3af957
CVE: CVE-2022-1054
Published: 2022-04-18
Description: The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have any authorisation checks when exporting its entries, and has the export function hooked to the init action. As a result, unauthenticated attackers could call it and retrieve PII such as first name, last name and email address of user registered for events
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d; https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d
CVE: CVE-2022-1063
Published: 2022-04-18
Description: The Thank Me Later WordPress plugin through 3.3.4 does not sanitise and escape the Message Subject field before outputting it in the Messages list, which could allow high privileges users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f90c528b-8c3a-4f9a-aa36-099c24abe082; https://wpscan.com/vulnerability/f90c528b-8c3a-4f9a-aa36-099c24abe082
CVE: CVE-2022-1088
Published: 2022-04-18
Description: The Page Security & Membership WordPress plugin through 1.5.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e86d456d-7a54-43e8-acf1-0b6a0a8bb41b; https://wpscan.com/vulnerability/e86d456d-7a54-43e8-acf1-0b6a0a8bb41b
CVE: CVE-2022-1090
Published: 2022-04-18
Description: The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3993fa42-b4c3-462b-b568-0a08fe112c19; https://wpscan.com/vulnerability/3993fa42-b4c3-462b-b568-0a08fe112c19
CVE: CVE-2022-1091
Published: 2022-04-18
Description: The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/10up/safe-svg/pull/28; https://wpscan.com/vulnerability/4d12533e-bdb7-411f-bcdf-4c5046db13f3; https://github.com/10up/safe-svg/pull/28
CVE: CVE-2022-1112
Published: 2022-04-18
Description: The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://wpscan.com/vulnerability/746c7cf2-0902-461a-a364-285505d73505; https://wpscan.com/vulnerability/746c7cf2-0902-461a-a364-285505d73505
CVE: CVE-2022-24859
Published: 2022-04-18
Description: PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content stream. The reason is that the last while-loop in `ContentStream._readInlineImage` only terminates when it finds the `EI` token, but never actually checks if the stream has already ended. This issue has been resolved in version `1.27.5`. Users unable to upgrade should validate and PDFs prior to iterating over their content stream.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://github.com/py-pdf/PyPDF2/issues/329; https://github.com/py-pdf/PyPDF2/pull/740; https://github.com/py-pdf/PyPDF2/releases/tag/1.27.5
CVE: CVE-2022-24863
Published: 2022-04-18
Description: http-swagger is an open source wrapper to automatically generate RESTful API documentation with Swagger 2.0. In versions of http-swagger prior to 1.2.6 an attacker may perform a denial of service attack consisting of memory exhaustion on the host system. The cause of the memory exhaustion is down to improper handling of http methods. Users are advised to upgrade. Users unable to upgrade may to restrict the path prefix to the "GET" method as a workaround.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-755
References: https://github.com/swaggo/http-swagger/commit/b7d83e8fba85a7a51aa7e45e8244b4173f15049e; https://github.com/swaggo/http-swagger/pull/62; https://github.com/swaggo/http-swagger/releases/tag/v1.2.6
CVE: CVE-2022-29457
Published: 2022-04-18
Description: Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://packetstormsecurity.com/files/167051/ManageEngine-ADSelfService-Plus-Build-6118-NTLMv2-Hash-Exposure.html; https://docs.unsafe-inline.com/0day/multiple-manageengine-applications-critical-information-disclosure-vulnerability; https://www.manageengine.com/products/self-service-password/release-notes.html
CVE: CVE-2022-29458
Published: 2022-04-18
Description: ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://lists.debian.org/debian-lts-announce/2022/10/msg00037.html
CVE: CVE-2022-24841
Published: 2022-04-18
Description: fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this authorization bypass issue. Fleet instances without teams, or with teams but without restricted team accounts are not affected. In affected versions a team admin can erroneously add themselves as admin, maintainer or observer on other teams. Users are advised to upgrade to version 4.13. There are no known workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-863, CWE-863
References: https://github.com/fleetdm/fleet/commit/da171d3b8d149c30b8307723cbe6b6e8847cb30c; https://github.com/fleetdm/fleet/security/advisories/GHSA-pr2g-j78h-84cr; https://github.com/fleetdm/fleet/commit/da171d3b8d149c30b8307723cbe6b6e8847cb30c
CVE: CVE-2022-29464
Published: 2022-04-18
Description: Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps directory. This affects WSO2 API Manager 2.2.0 up to 4.0.0, WSO2 Identity Server 5.2.0 up to 5.11.0, WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0 and 5.6.0, WSO2 Identity Server as Key Manager 5.3.0 up to 5.11.0, WSO2 Enterprise Integrator 6.2.0 up to 6.6.0, WSO2 Open Banking AM 1.4.0 up to 2.0.0 and WSO2 Open Banking KM 1.4.0, up to 2.0.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/166921/WSO-Arbitrary-File-Upload-Remote-Code-Execution.html; http://www.openwall.com/lists/oss-security/2022/04/22/7; https://github.com/hakivvi/CVE-2022-29464
CVE: CVE-2022-28108
Published: 2022-04-19
Description: Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.gabriel.urdhr.fr/2022/02/07/selenium-standalone-server-csrf-dns-rebinding-rce/; https://www.openwall.com/lists/oss-security/2022/02/07/3; https://www.selenium.dev/downloads/
CVE: CVE-2022-1065
Published: 2022-04-19
Description: A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor. This issue affects: Abacus ERP v2022 versions prior to R1 of 2022-01-15; v2021 versions prior to R4 of 2022-01-15; v2020 versions prior to R6 of 2022-01-15; v2019 versions later than R5 (service pack); v2018 versions later than R5 (service pack). This issue does not affect: Abacus ERP v2019 versions prior to R5 of 2020-03-15; v2018 versions prior to R7 of 2020-04-15; v2017 version and prior versions and prior versions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-304, CWE-287
References: https://www.redguard.ch/advisories/abacus_mfa_bypass.txt; https://www.redguard.ch/advisories/abacus_mfa_bypass.txt
CVE: CVE-2022-0645
Published: 2022-04-19
Description: Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/posthog/posthog/commit/859d8ed9ac7c5026db09714a26c85c1458abb038; https://huntr.dev/bounties/c13258a2-30e3-4261-9a3b-2f39c49a8bd6; https://github.com/posthog/posthog/commit/859d8ed9ac7c5026db09714a26c85c1458abb038
CVE: CVE-2021-41570
Published: 2022-04-19
Description: Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password field during a Settings/Configuration Add operation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.veritas.com/content/support/en_US/security/VTS22-007; https://www.veritas.com/support/en_US/security; https://www.veritas.com/content/support/en_US/security/VTS22-007
CVE: CVE-2021-43129
Published: 2022-04-19
Description: A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz.
CVSS Score: 6.5 (MEDIUM)
References: https://community.brightspace.com/s/article/retirement-notice-disable-right-click; https://github.com/Skotizo/CVE-2021-43129; https://www.d2l.com/learning-management-system-lms/
CVE: CVE-2022-26593
Published: 2022-04-19
Description: Cross-site scripting (XSS) vulnerability in the Asset module's asset categories selector in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of a asset category.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-26593-stored-xss-with-category-name-in-asset-categories-selector; http://liferay.com
CVE: CVE-2022-26595
Published: 2022-04-19
Description: Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user's site membership assignment UI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276
References: http://liferay.com; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-26595-unauthorized-access-to-site-group-list; http://liferay.com
CVE: CVE-2022-27927
Published: 2022-04-19
Description: A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course_code and/or customer_number parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/167017/Microfinance-Management-System-1.0-SQL-Injection.html; https://github.com/erengozaydin/Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated; https://www.sourcecodester.com/php/14822/microfinance-management-system.html