deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-22517
Published: 2022-04-07
Description: An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-334, CWE-330
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17091&token=c450f8bbbd838c647d102f359356386c6ea5aeca&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17091&token=c450f8bbbd838c647d102f359356386c6ea5aeca&download=
CVE: CVE-2022-22518
Published: 2022-04-07
Description: A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17092&token=a556b1695843bb42084dc63d5bdf553ca02ea393&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17092&token=a556b1695843bb42084dc63d5bdf553ca02ea393&download=
CVE: CVE-2022-22519
Published: 2022-04-07
Description: A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17094&token=2fb188e2213c74194e81ba61ff99f1c68602ba4d&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17094&token=2fb188e2213c74194e81ba61ff99f1c68602ba4d&download=
CVE: CVE-2022-23970
Published: 2022-04-07
Description: ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-5784-68aa3-1.html; https://www.twcert.org.tw/tw/cp-132-5784-68aa3-1.html
CVE: CVE-2022-23971
Published: 2022-04-07
Description: ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service disruption.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-5785-cf8db-1.html; https://www.twcert.org.tw/tw/cp-132-5785-cf8db-1.html
CVE: CVE-2022-23972
Published: 2022-04-07
Description: ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.twcert.org.tw/tw/cp-132-5786-d2e86-1.html; https://www.twcert.org.tw/tw/cp-132-5786-d2e86-1.html
CVE: CVE-2022-23973
Published: 2022-04-07
Description: ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.twcert.org.tw/tw/cp-132-5787-b0e64-1.html; https://www.twcert.org.tw/tw/cp-132-5787-b0e64-1.html
CVE: CVE-2022-25594
Published: 2022-04-07
Description: Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.twcert.org.tw/tw/cp-132-5973-6b449-1.html; https://www.twcert.org.tw/tw/cp-132-5973-6b449-1.html
CVE: CVE-2022-25595
Published: 2022-04-07
Description: ASUS RT-AC86U has improper user request handling, which allows an unauthenticated LAN attacker to cause a denial of service by sending particular request a server-to-client reply attempt.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.twcert.org.tw/tw/cp-132-5792-3f3f5-1.html; https://www.twcert.org.tw/tw/cp-132-5792-3f3f5-1.html
CVE: CVE-2022-25596
Published: 2022-04-07
Description: ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.twcert.org.tw/tw/cp-132-5793-4f9d3-1.html; https://www.twcert.org.tw/tw/cp-132-5793-4f9d3-1.html
CVE: CVE-2022-25597
Published: 2022-04-07
Description: ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/tw/cp-132-5794-09c33-1.html; https://www.twcert.org.tw/tw/cp-132-5794-09c33-1.html
CVE: CVE-2022-26612
Published: 2022-04-07
Description: In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn't resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-59
References: https://lists.apache.org/thread/hslo7wzw2449gv1jyjk8g6ttd7935fyz; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lists.apache.org/thread/hslo7wzw2449gv1jyjk8g6ttd7935fyz
CVE: CVE-2022-26670
Published: 2022-04-07
Description: D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.twcert.org.tw/tw/cp-132-5972-c259e-1.html; https://www.twcert.org.tw/tw/cp-132-5972-c259e-1.html
CVE: CVE-2022-26671
Published: 2022-04-07
Description: Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated remote attacker can use the hard-coded credential to acquire partial system information and modify system setting to cause partial disrupt of service.
CVSS Score: 7.3 (HIGH)
CWE: CWE-798, CWE-798
References: https://www.twcert.org.tw/tw/cp-132-5971-b691f-1.html; https://www.twcert.org.tw/tw/cp-132-5971-b691f-1.html
CVE: CVE-2022-26675
Published: 2022-04-07
Description: aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-5969-a5d4a-1.html; https://www.twcert.org.tw/tw/cp-132-5969-a5d4a-1.html
CVE: CVE-2022-26676
Published: 2022-04-07
Description: aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269, CWE-863
References: https://www.twcert.org.tw/tw/cp-132-5970-2f405-1.html; https://www.twcert.org.tw/tw/cp-132-5970-2f405-1.html
CVE: CVE-2021-36202
Published: 2022-04-07
Description: Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys could allow an authenticated attacker to inject malicious code into the MUI PDF export feature. This issue affects: Johnson Controls Metasys All 10 versions versions prior to 10.1.5; All 11 versions versions prior to 11.0.2.
CVSS Score: 8.4 (HIGH)
CWE: CWE-918, CWE-918
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-02; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-02
CVE: CVE-2021-43453
Published: 2022-04-07
Description: A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c file. This issue is similar to CVE-2020-29657.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/jerryscript-project/jerryscript/issues/4754; https://github.com/jerryscript-project/jerryscript/issues/4754
CVE: CVE-2021-43474
Published: 2022-04-07
Description: An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 (Lastest) via any parameter in the HNAP1 function
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/sek1th/iot/blob/master/dir-823g_all.md; https://www.dlink.com/en/security-bulletin/; https://github.com/sek1th/iot/blob/master/dir-823g_all.md
CVE: CVE-2022-24681
Published: 2022-04-07
Description: Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://manageengine.com; https://raxis.com/blog/cve-2022-24681; https://www.manageengine.com/products/self-service-password/kb/CVE-2022-24681.html
CVE: CVE-2022-28796
Published: 2022-04-08
Description: jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.1; https://github.com/torvalds/linux/commit/cc16eecae687912238ee6efbff71ad31e2bc414e; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-28805
Published: 2022-04-08
Description: singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/lua/lua/commit/1f3c6f4534c[PII_REDACTED]697d98d1145a1f030fa; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJNJ66IFDUKWJJZXHGOLRGIA3HWWC36R/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHYZOEFDVLVAD6EEP4CDW6DNONIVVHPA/
CVE: CVE-2022-1219
Published: 2022-04-08
Description: SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/pimcore/pimcore/commit/a697830359df06246acca502ee2455614de68017; https://huntr.dev/bounties/f700bd18-1fd3-4a05-867f-07176aebc7f6; https://github.com/pimcore/pimcore/commit/a697830359df06246acca502ee2455614de68017
CVE: CVE-2022-26624
Published: 2022-04-08
Description: Bootstrap v3.1.11 and v3.3.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Title parameter in /vendor/views/add_product.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/file/d/1Dp0dD9PNcwamjRi0ldD0hUOEivu48SR6/view?usp=sharing; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/blob/master/application/modules/vendor/views/add_product.php#L35; https://drive.google.com/file/d/1Dp0dD9PNcwamjRi0ldD0hUOEivu48SR6/view?usp=sharing
CVE: CVE-2022-27061
Published: 2022-04-08
Description: AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166659/AeroCMS-0.0.1-Shell-Upload.html; https://drive.google.com/file/d/1PdF7gTUt_QuU2ObS9YUVew6orHaho-QF/view?usp=sharing; https://github.com/D4rkP0w4r/AeroCMS-Unrestricted-File-Upload-POC
CVE: CVE-2022-27062
Published: 2022-04-08
Description: AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross-Site-Scripting.html; https://drive.google.com/file/d/1kMGPBLKgefvKZj34QxDlPTxXdcT0kRR_/view?usp=sharing; https://github.com/D4rkP0w4r/AeroCMS-Add_Posts-Stored_XSS-Poc
CVE: CVE-2022-27063
Published: 2022-04-08
Description: AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross-Site-Scripting.html; https://drive.google.com/file/d/1GxOyX1JkG0trfdaCLfe06TR6WLIGoUXE/view?usp=sharing; https://github.com/D4rkP0w4r/AeroCMS-Comment-Stored_XSS-Poc
CVE: CVE-2022-27064
Published: 2022-04-08
Description: Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploaded_songs.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166653/Musical-World-1-Shell-Upload.html; https://drive.google.com/file/d/1j5xDRpkYL7IeHYdUm34YX9iupvVEVa9D/view?usp=sharing; https://github.com/D4rkP0w4r/Musical-World-Unrestricted-File-Upload-RCE-POC
CVE: CVE-2022-27346
Published: 2022-04-08
Description: Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166654/E-Commerce-Website-1.1.0-Shell-Upload.html; https://drive.google.com/file/d/1SSBY92vfO1Q_Oska6mdpV9vuHmu0BVxk/view?usp=sharing; https://github.com/D4rkP0w4r/Full-Ecommece-Website-Slides-Unrestricted-File-Upload-RCE-POC
CVE: CVE-2022-27348
Published: 2022-04-08
Description: Social Codia SMS v1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/166650/Social-Codia-SMS-1-Cross-Site-Scripting.html; https://drive.google.com/file/d/1PLRmIi7EBMAXkLMUhUy09PVph1CW6otF/view?usp=sharing; https://github.com/D4rkP0w4r/sms-Add_Student-Stored_XSS-POC
CVE: CVE-2022-27349
Published: 2022-04-08
Description: Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166655/Social-Codia-SMS-1-Shell-Upload.html; https://drive.google.com/file/d/10vgciE0FwkZpzLZf9JSGGyvq3hwehXMs/view?usp=sharing; https://github.com/D4rkP0w4r/sms-Unrestricted-File-Upload-RCE-POC
CVE: CVE-2022-27351
Published: 2022-04-08
Description: Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166651/PHPGurukul-Zoo-Management-System-1.0-Shell-Upload.html; https://drive.google.com/file/d/14WEhaUdOaKdwM8Mlztuko4nnQsmoe89O/view?usp=sharing; https://github.com/D4rkP0w4r/CVEs/blob/main/Zoo%20Management%20System%20Upload%20%2B%20RCE/POC.md
CVE: CVE-2022-27352
Published: 2022-04-08
Description: Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166656/Simple-House-Rental-System-1-Shell-Upload.html; https://drive.google.com/file/d/1ZmGyRo9Ah8w3NQF93vsYEj4JQExyVT7Z/view?usp=sharing; https://github.com/D4rkP0w4r/CVEs/blob/main/Simple%20House%20Rental%20System%20Upload%20%2B%20RCE/POC.md
CVE: CVE-2022-27357
Published: 2022-04-08
Description: Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166652/E-Commerce-Website-1.0-Shell-Upload.html; https://drive.google.com/file/d/1m6rovKb3ZWJ-vbsVlfaZDGmyZ_F13nCf/view?usp=sharing; https://github.com/D4rkP0w4r/CVEs/blob/main/Ecommerce%20Website%20Upload%20%2B%20RCE/POC.md
CVE: CVE-2022-27991
Published: 2022-04-08
Description: Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /staff_login.php via the Staff ID and Staff Password parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/D4rkP0w4r/CVEs/blob/main/Online-Banking_SQLI/POC.md; https://github.com/D4rkP0w4r/CVEs/blob/main/Online-Banking_SQLI/POC.md
CVE: CVE-2022-27992
Published: 2022-04-08
Description: Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/166648/PHPGurukul-Zoo-Management-System-1.0-SQL-Injection.html; https://github.com/D4rkP0w4r/CVEs/blob/main/Zoo%20Management%20System%20SQLI/POC.md; http://packetstormsecurity.com/files/166648/PHPGurukul-Zoo-Management-System-1.0-SQL-Injection.html
CVE: CVE-2022-28000
Published: 2022-04-08
Description: Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /Car_Rental/booking.php via the id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/166657/Car-Rental-System-1.0-SQL-Injection.html; https://github.com/D4rkP0w4r/CVEs/blob/main/Car%20Rental%20System%20SQLI/POC.md; http://packetstormsecurity.com/files/166657/Car-Rental-System-1.0-SQL-Injection.html
CVE: CVE-2022-28001
Published: 2022-04-08
Description: Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/166658/Movie-Seat-Reservation-System-1.0-File-Disclosure-SQL-Injection.html; https://github.com/D4rkP0w4r/CVEs/blob/main/Movie%20Seat%20Reservation%20System%20SQLI/POC.md; http://packetstormsecurity.com/files/166658/Movie-Seat-Reservation-System-1.0-File-Disclosure-SQL-Injection.html
CVE: CVE-2022-28002
Published: 2022-04-08
Description: Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: http://packetstormsecurity.com/files/166658/Movie-Seat-Reservation-System-1.0-File-Disclosure-SQL-Injection.html; https://github.com/D4rkP0w4r/CVEs/blob/main/Movie%20Seat%20Reservation%20System%20File%20Disclosure/POC.md; http://packetstormsecurity.com/files/166658/Movie-Seat-Reservation-System-1.0-File-Disclosure-SQL-Injection.html
CVE: CVE-2021-46436
Published: 2022-04-08
Description: An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in ad_manage.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/xunyang1/ZZCMS/issues/1; https://github.com/xunyang1/ZZCMS/issues/1
CVE: CVE-2021-46437
Published: 2022-04-08
Description: An issue was discovered in ZZCMS 2021. There is a cross-site scripting (XSS) vulnerability in ad_manage.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/xunyang1/ZZCMS/issues/2; https://github.com/xunyang1/ZZCMS/issues/2
CVE: CVE-2021-46367
Published: 2022-04-08
Description: RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated attacker can upload a PHP file and bypass the .htacess configuration to deny execution of .php files in media and files directory by default.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://gist.github.com/faisalfs10x/bd12e9abefb0d44f020bf297a14a4597; https://packetstormsecurity.com/files/165430/RiteCMS-3.1.0-Shell-Upload-Remote-Code-Execution.html; https://ritecms.com/
CVE: CVE-2022-24229
Published: 2022-04-08
Description: A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ONLYOFFICE/DocumentServer; https://github.com/ONLYOFFICE/document-server-integration/issues/252; https://www.onlyoffice.com/
CVE: CVE-2021-41715
Published: 2022-04-08
Description: libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://github.com/libsixel/libsixel/issues/27; https://github.com/libsixel/libsixel/issues/27
CVE: CVE-2022-27044
Published: 2022-04-08
Description: libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/saitoha/libsixel/issues/156; https://github.com/saitoha/libsixel/issues/156
CVE: CVE-2022-27046
Published: 2022-04-08
Description: libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://github.com/saitoha/libsixel/issues/157; https://github.com/saitoha/libsixel/issues/157
CVE: CVE-2020-4668
Published: 2022-04-08
Description: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186283.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/186283; https://www.ibm.com/support/pages/node/6570407; https://exchange.xforce.ibmcloud.com/vulnerabilities/186283
CVE: CVE-2021-40656
Published: 2022-04-08
Description: libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/libsixel/libsixel/issues/25; https://github.com/libsixel/libsixel/issues/25
CVE: CVE-2021-43483
Published: 2022-04-08
Description: An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read or update the configuraiton without authentication.
CVSS Score: 8.0 (HIGH)
CWE: CWE-306
References: https://alexandrevvo.medium.com/improper-access-control-no-control-at-all-in-kaon-cg3000-router-c225d2434ec1; https://alexandrevvo.medium.com/improper-access-control-no-control-at-all-in-kaon-cg3000-router-c225d2434ec1