deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-37253
Published: 2022-09-06
Description: Persistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/167875/Crime-Reporting-System-1.0-Cross-Site-Scripting.html; https://sourcecodehero.com/crime-reporting-system-project-in-php-with-source-code/; https://packetstormsecurity.com/files/167875/Crime-Reporting-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2022-3134
Published: 2022-09-06
Description: Use After Free in GitHub repository vim/vim prior to 9.0.0389.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/vim/vim/commit/ccfde4d028e891a41e3548323c3d47b06fb0b83e; https://huntr.dev/bounties/6ec79e49-c7ab-4cd6-a517-e7934c2eb9dc; https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE: CVE-2022-26858
Published: 2022-09-06
Description: Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.dell.com/support/kbdoc/000202194; https://www.dell.com/support/kbdoc/000202194
CVE: CVE-2022-26859
Published: 2022-09-06
Description: Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.dell.com/support/kbdoc/000202194; https://www.dell.com/support/kbdoc/000202194
CVE: CVE-2022-26860
Published: 2022-09-06
Description: Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.dell.com/support/kbdoc/000202194; https://www.dell.com/support/kbdoc/000202194
CVE: CVE-2022-26861
Published: 2022-09-06
Description: Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
CVSS Score: 7.9 (HIGH)
CWE: CWE-1038
References: https://www.dell.com/support/kbdoc/000202194; https://www.dell.com/support/kbdoc/000202194
CVE: CVE-2022-36061
Published: 2022-09-06
Description: Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B state, the state will be altered for contract B as if the call was not made in the read-only mode. This can lead to some effects not designed by the original smart contracts programmers. This issue was patched in version 1.3.35. There are no known workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-665
References: https://github.com/ElrondNetwork/elrond-go/blob/8e402fa6d7e91e779980122d3798b2bf50892945/integrationTests/vm/txsFee/asyncESDT_test.go#L452; https://github.com/ElrondNetwork/elrond-go/releases/tag/v1.3.35; https://github.com/ElrondNetwork/elrond-go/security/advisories/GHSA-mv8x-668m-53fg
CVE: CVE-2022-36064
Published: 2022-09-06
Description: Shescape is a shell escape package for JavaScript. An Inefficient Regular Expression Complexity vulnerability impacts users that use Shescape to escape arguments for the Unix shells `Bash` and `Dash`, or any not-officially-supported Unix shell; and/or using the `escape` or `escapeAll` functions with the `interpolation` option set to `true`. An attacker can cause polynomial backtracking or quadratic runtime in terms of the input string length due to two Regular Expressions in Shescape that are vulnerable to Regular Expression Denial of Service (ReDoS). This bug has been patched in v1.5.10. For `Dash` only, this bug has been patched since v1.5.9. As a workaround, a maximum length can be enforced on input strings to Shescape to reduce the impact of the vulnerability. It is not recommended to try and detect vulnerable input strings, as the logic for this may end up being vulnerable to ReDoS itself.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-1333, CWE-1333
References: https://github.com/ericcornelissen/shescape/pull/373; https://github.com/ericcornelissen/shescape/releases/tag/v1.5.10; https://github.com/ericcornelissen/shescape/security/advisories/GHSA-gp75-h7j6-5pv3
CVE: CVE-2022-36065
Published: 2022-09-06
Description: GrowthBook is an open-source platform for feature flagging and A/B testing. With some self-hosted configurations in versions prior to 2022-08-29, attackers can register new accounts and upload files to arbitrary directories within the container. If the attacker uploads a Python script to the right location, they can execute arbitrary code within the container. To be affected, ALL of the following must be true: Self-hosted deployment (GrowthBook Cloud is unaffected); using local file uploads (as opposed to S3 or Google Cloud Storage); NODE_ENV set to a non-production value and JWT_SECRET set to an easily guessable string like `dev`. This issue is patched in commit 1a5edff8786d141161bf880c2fd9ccbe2850a264 (2022-08-29). As a workaround, set `JWT_SECRET` environment variable to a long random string. This will stop arbitrary file uploads, but the only way to stop attackers from registering accounts is by updating to the latest build.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-24, CWE-22
References: https://github.com/growthbook/growthbook/commit/1a5edff8786d141161bf880c2fd9ccbe2850a264; https://github.com/growthbook/growthbook/pull/487; https://github.com/growthbook/growthbook/security/advisories/GHSA-j24q-55xh-wm4r
CVE: CVE-2022-36072
Published: 2022-09-06
Description: SilverwareGames.io is a social network for users to play video games online. In version 1.1.8 and prior, due to an unobvious feature of PHP, hashes generated by built-in functions and starting with the `0e` symbols were being handled as zero multiplied with the `e` number. Therefore, the hash value was equal to 0. The maintainers fixed this in version 1.1.9 by using `===` instead of `==` in comparisons where it is possible (e.g. on sign in/sign up handlers).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-597
References: https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-w4wq-7j4q-j2fh; https://github.com/mesosoi/silverwaregames-io-issue-tracker/security/advisories/GHSA-w4wq-7j4q-j2fh
CVE: CVE-2022-36663
Published: 2022-09-06
Description: Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/GluuFederation/oxAuth/releases/tag/4.4.1; https://gluu.org/gluu-4-4-1/; https://github.com/GluuFederation/oxAuth/releases/tag/4.4.1
CVE: CVE-2022-38176
Published: 2022-09-06
Description: An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as CVE-2021-31859.
CVSS Score: 7.8 (HIGH)
References: https://www.ysoft.com/en/legal/ysoft-safeq-client-v3-local-privilege-escalation; https://ysoft.com; https://www.ysoft.com/en/legal/ysoft-safeq-client-v3-local-privilege-escalation
CVE: CVE-2022-36067
Published: 2022-09-06
Description: vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.11 of vm2. There are no known workarounds.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-913, CWE-913
References: https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71; https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164; https://github.com/patriksimek/vm2/issues/467
CVE: CVE-2022-1368
Published: 2022-09-06
Description: The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monitoring web socket communications from an unauthenticated session. This could allow an attacker to escalate privileges to match those of the compromised account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03
CVE: CVE-2022-1522
Published: 2022-09-06
Description: The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03
CVE: CVE-2022-1525
Published: 2022-09-06
Description: The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-602
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03
CVE: CVE-2022-35913
Published: 2022-09-06
Description: Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin. The attacker and victim must follow each other's paynym. Then, the victim must try to collaborate with the attacker for a Stonewallx2 transaction. Next, the attacker broadcasts a tx, spending the inputs used in Stonewallx2 before the victim can broadcast the collaborative transaction. The attacker does not signal opt in RBF, and uses the lowest fee rate. This would result in the victim being unable to perform Stonewallx2. (Note that the attacker could use multiple paynyms.)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-July/020737.html; https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-June/020595.html; https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-July/020737.html
CVE: CVE-2022-36387
Published: 2022-09-06
Description: Broken Access Control vulnerability in Alessio Caiazza's About Me plugin <= 1.0.12 at WordPress.
CVSS Score: 7.6 (HIGH)
CWE: CWE-264
References: https://patchstack.com/database/vulnerability/about-me/wordpress-about-me-plugin-1-0-12-broken-access-control-vulnerability/_s_id=cve; https://wordpress.org/plugins/about-me/; https://patchstack.com/database/vulnerability/about-me/wordpress-about-me-plugin-1-0-12-broken-access-control-vulnerability/_s_id=cve
CVE: CVE-2022-36427
Published: 2022-09-06
Description: Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin <= 1.5 at WordPress.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: https://patchstack.com/database/vulnerability/about-rentals/wordpress-about-rentals-plugin-1-5-missing-access-control-vulnerability/_s_id=cve; https://wordpress.org/plugins/about-rentals/; https://patchstack.com/database/vulnerability/about-rentals/wordpress-about-rentals-plugin-1-5-missing-access-control-vulnerability/_s_id=cve
CVE: CVE-2022-37344
Published: 2022-09-06
Description: Missing Access Control vulnerability in PHP Crafts Accommodation System plugin <= 1.0.1 at WordPress.
CVSS Score: 7.6 (HIGH)
CWE: CWE-264
References: https://patchstack.com/database/vulnerability/accommodation-system/wordpress-accommodation-system-plugin-1-0-1-missing-access-control-vulnerability/_s_id=cve; https://wordpress.org/plugins/accommodation-system/; https://patchstack.com/database/vulnerability/accommodation-system/wordpress-accommodation-system-plugin-1-0-1-missing-access-control-vulnerability/_s_id=cve
CVE: CVE-2022-38528
Published: 2022-09-06
Description: Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/assimp/assimp/issues/4662; https://github.com/assimp/assimp/issues/4662
CVE: CVE-2022-38529
Published: 2022-09-06
Description: tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/syoyo/tinyexr/issues/169; https://github.com/syoyo/tinyexr/issues/169
CVE: CVE-2022-38530
Published: 2022-09-06
Description: GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/2216; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2216
CVE: CVE-2021-36782
Published: 2022-09-07
Description: A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Project Members and User Base to use the Kubernetes API to retrieve plaintext version of sensitive data. This issue affects: SUSE Rancher Rancher versions prior to 2.5.16; Rancher versions prior to 2.6.7.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-312
References: https://bugzilla.suse.com/show_bug.cgi?id=1193988; https://github.com/rancher/rancher/security/advisories/GHSA-g7j7-h4q8-8w2f; https://bugzilla.suse.com/show_bug.cgi?id=1193988
CVE: CVE-2021-36783
Published: 2022-09-07
Description: A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints. This issue affects: SUSE Rancher Rancher versions prior to 2.6.4; Rancher versions prior to 2.5.13.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-522, CWE-522
References: https://bugzilla.suse.com/show_bug.cgi?id=1193990; https://github.com/rancher/rancher/security/advisories/GHSA-8w87-58w6-hfv8; https://bugzilla.suse.com/show_bug.cgi?id=1193990
CVE: CVE-2022-21950
Published: 2022-09-07
Description: A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://bugzilla.suse.com/show_bug.cgi?id=1199280; https://bugzilla.suse.com/show_bug.cgi?id=1199280
CVE: CVE-2022-31247
Published: 2022-09-07
Description: An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such as cluster-owner, manage cluster members, project-owner and manage project members) to gain owner permission in another project in the same cluster or in another project on a different downstream cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.6.7; Rancher versions prior to 2.5.16.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-285
References: https://bugzilla.suse.com/show_bug.cgi?id=1199730; https://github.com/rancher/rancher/security/advisories/GHSA-6x34-89p7-95wg; https://bugzilla.suse.com/show_bug.cgi?id=1199730
CVE: CVE-2022-31251
Published: 2022-09-07
Description: A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://bugzilla.suse.com/show_bug.cgi?id=1201674; https://bugzilla.suse.com/show_bug.cgi?id=1201674
CVE: CVE-2022-37189
Published: 2022-09-07
Description: DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to the usage of the unsafe 'xml.etree' library to parse untrusted XML input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://docs.python.org/3/library/xml.html#xml-vulnerabilities; https://github.com/DDMAL/MEI2Volpiano/; https://github.com/DDMAL/MEI2Volpiano/blob/987b70fff991235e682405f901388af0f414eaa8/mei2volpiano/mei2volpiano.py#L59
CVE: CVE-2022-40023
Published: 2022-09-07
Description: Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/sqlalchemy/mako/blob/c2f392e0be52dc67d1b9770ab8cce6a9c736d547/mako/ext/extract.py#L21; https://github.com/sqlalchemy/mako/commit/925760291d6efec64fda6e9dd1fd9cfbd5be068c; https://github.com/sqlalchemy/mako/issues/366
CVE: CVE-2022-31149
Published: 2022-09-07
Description: ActivityWatch open-source automated time tracker. Versions prior to 0.12.0b2 are vulnerable to DNS rebinding attacks. This vulnerability impacts everyone running ActivityWatch and gives the attacker full access to the ActivityWatch REST API. Users should upgrade to v0.12.0b2 or later to receive a patch. As a workaround, block DNS lookups that resolve to 127.0.0.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-290
References: https://gist.github.com/zozs/fdebbce75fc8538c15851b46db944a16; https://github.com/ActivityWatch/activitywatch/discussions/778; https://github.com/ActivityWatch/activitywatch/security/advisories/GHSA-v9fg-6g9j-h4x4
CVE: CVE-2022-31166
Published: 2022-09-07
Description: XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Starting in versions 11.3.7, 11.0.3, and 12.0RC1, it is possible to exploit a bug in XWikiRights resolution of groups to obtain privilege escalation. More specifically, editing a right with the object editor leads to adding a supplementary empty value to groups which is then resolved as a reference to XWiki.WebHome page. Adding an XWikiGroup xobject to that page then transforms it to a group, any user put in that group would then obtain the privileges related to the edited right. Note that this security issue is normally mitigated by the fact that XWiki.WebHome (and XWiki space in general) should be protected by default for edit rights. The problem has been patched in XWiki 13.10.4 and 14.2RC1 to not consider anymore empty values in XWikiRights. It's possible to work around the problem by setting appropriate rights on XWiki.WebHome page to prevent users to edit it.
CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: https://github.com/xwiki/xwiki-platform/pull/1800; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-g4h6-qp44-wqvx; https://jira.xwiki.org/browse/XWIKI-15776
CVE: CVE-2022-31167
Published: 2022-09-07
Description: XWiki Platform Security Parent POM contains the security APIs for XWiki Platform, a generic wiki platform. Starting with version 5.0 and prior to 12.10.11, 13.10.1, and 13.4.6, a bug in the security cache stores rules associated to document Page1.Page2 and space Page1.Page2 in the same cache entry. That means that it's possible to overwrite the rights of a space or a document by creating the page of the space with the same name and checking the right of the new one first so that they end up in the security cache and are used for the other too. The problem has been patched in XWiki 12.10.11, 13.10.1, and 13.4.6. There are no known workarounds.
CVSS Score: 7.1 (HIGH)
CWE: CWE-285, CWE-862, CWE-862
References: https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gg53-wf5x-r3r6; https://jira.xwiki.org/browse/XWIKI-14075; https://jira.xwiki.org/browse/XWIKI-18983
CVE: CVE-2022-35513
Published: 2022-09-07
Description: The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-922
References: http://packetstormsecurity.com/files/168428/Blink1Control2-2.2.7-Weak-Password-Encryption.html; https://github.com/p1ckzi/CVE-2022-35513; https://github.com/todbot/Blink1Control2/releases
CVE: CVE-2022-36271
Published: 2022-09-07
Description: Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://outbyte.com; https://github.com/SaumyajeetDas/POC-of-CVE-2022-36271; http://outbyte.com
CVE: CVE-2022-37108
Published: 2022-09-07
Description: An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab files. The patch for this was present in SNYPR version 6.4 Jun 2022 R3_[06170871], but may have been introduced sooner.
CVSS Score: 8.7 (HIGH)
CWE: CWE-74
References: https://conway.scot/securonix-rce/; https://conway.scot/securonix-rce/
CVE: CVE-2022-37730
Published: 2022-09-07
Description: In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server (corresponding to the identity authentication information) as the victim without the victim's knowledge.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/whiex/webvue/blob/gh-pages/Ftcms%20CSRF.md; https://github.com/whiex/webvue/blob/gh-pages/Ftcms%20CSRF.md
CVE: CVE-2022-37731
Published: 2022-09-07
Description: ftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into the web page, causing the user / administrator to trigger malicious code when accessing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/whiex/webvue2/blob/gh-pages/ftcmsxss.md; https://github.com/whiex/webvue2/blob/gh-pages/ftcmsxss.md
CVE: CVE-2022-3152
Published: 2022-09-07
Description: Unverified Password Change in GitHub repository phpfusion/phpfusion prior to 9.10.20.
CVSS Score: 8.8 (HIGH)
CWE: CWE-620, CWE-287
References: https://github.com/phpfusion/phpfusion/commit/57c96d4a0c00e8e1e[PII_REDACTED]4688123c6e991; https://huntr.dev/bounties/b3f888d2-5c71-4682-8[PII_REDACTED]1fd5a; https://github.com/phpfusion/phpfusion/commit/57c96d4a0c00e8e1e[PII_REDACTED]4688123c6e991
CVE: CVE-2022-31414
Published: 2022-09-07
Description: D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/dlink-dir1960-%200x42acdc.md; https://tsd.dlink.com.tw/ddgo; https://www.dlink.com/en/security-bulletin/