deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-3700
Published: 2022-02-24
Description: A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1992830; https://gitlab.freedesktop.org/spice/usbredir/-/commit/03c519ff5831ba; https://lists.debian.org/debian-lts-announce/2022/03/msg00030.html
CVE: CVE-2021-44531
Published: 2022-02-24
Description: Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: https://hackerone.com/reports/1429694; https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-44532
Published: 2022-02-24
Description: Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used within a certificate chain, allowing the bypass of these name constraints.Versions of Node.js with the fix for this escape SANs containing the problematic characters in order to prevent the injection. This behavior can be reverted through the --security-revert command-line option.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-296, CWE-295
References: https://hackerone.com/reports/1429694; https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-44533
Published: 2022-02-24
Description: Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in order to inject a Common Name that would allow bypassing the certificate subject verification.Affected versions of Node.js that do not accept multi-value Relative Distinguished Names and are thus not vulnerable to such attacks themselves. However, third-party code that uses node's ambiguous presentation of certificate subjects may be vulnerable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://hackerone.com/reports/1429694; https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-44662
Published: 2022-02-24
Description: A Site Scripting (XSS) vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/thexerteproject/xerteonlinetoolkits/commit/694a591b5ab7f634f036afaac10397cf3677a98c; https://riklutz.nl/2021/10/30/reflected-xss-in-xerte/; https://www.xerte.org.uk/index.php/en/news/blog/80-news/336-xerte-3-8-5-important-security-update-now-available
CVE: CVE-2021-44663
Published: 2022-02-24
Description: A Remote Code Execution (RCE) vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/thexerteproject/xerteonlinetoolkits/commit/694a591b5ab7f634f036afaac10397cf3677a98c; https://riklutz.nl/2021/10/30/unauthenticated-file-upload-to-remote-code-execution-in-xerte/; https://www.xerte.org.uk/index.php/en/news/blog/80-news/336-xerte-3-8-5-important-security-update-now-available
CVE: CVE-2021-4021
Published: 2022-02-24
Description: A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-834
References: https://github.com/radareorg/radare2/issues/19436; https://github.com/radareorg/radare2/issues/19436
CVE: CVE-2022-0544
Published: 2022-02-24
Description: An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-191, CWE-191
References: https://developer.blender.org/T94661; https://lists.debian.org/debian-lts-announce/2022/06/msg00021.html; https://www.debian.org/security/2022/dsa-5176
CVE: CVE-2022-0545
Published: 2022-02-24
Description: An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://developer.blender.org/T94629; https://lists.debian.org/debian-lts-announce/2022/06/msg00021.html; https://www.debian.org/security/2022/dsa-5176
CVE: CVE-2022-0546
Published: 2022-02-24
Description: A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://developer.blender.org/T94572; https://lists.debian.org/debian-lts-announce/2022/06/msg00021.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIZADV3AHTWZ2YKEFTVLNK3K4F4KTYLM/
CVE: CVE-2022-0651
Published: 2022-02-24
Description: The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0651
CVE: CVE-2022-0653
Published: 2022-02-24
Description: The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the site_url parameter found in the ~/assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up to and including 3.6.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2655168%40profile-builder&new=2655168%40profile-builder&sfp_email=&sfph_mail=; https://www.wordfence.com/blog/2022/02/reflected-cross-site-scripting-vulnerability-patched-in-wordpress-profile-builder-plugin/; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2655168%40profile-builder&new=2655168%40profile-builder&sfp_email=&sfph_mail=
CVE: CVE-2022-0683
Published: 2022-02-24
Description: The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the ~/includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up to and including 5.0.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2680585%40essential-addons-for-elementor-lite&new=2680585%40essential-addons-for-elementor-lite&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0683; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2680585%40essential-addons-for-elementor-lite&new=2680585%40essential-addons-for-elementor-lite&sfp_email=&sfph_mail=
CVE: CVE-2022-0710
Published: 2022-02-24
Description: The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.wordfence.com/blog/2022/02/reflected-xss-in-header-footer-code-manager/; https://www.wordfence.com/blog/2022/02/reflected-xss-in-header-footer-code-manager/
CVE: CVE-2022-21824
Published: 2022-02-24
Description: Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "__proto__". The prototype pollution has very limited control, in that it only allows an empty string to be assigned to numerical keys of the object prototype.Node.js >= 12.22.9, >= 14.18.3, >= 16.13.2, and >= 17.3.1 use a null protoype for the object these properties are being assigned to.
CVSS Score: 8.2 (HIGH)
CWE: CWE-471, CWE-1321
References: https://hackerone.com/reports/1431042; https://lists.debian.org/debian-lts-announce/2022/10/msg00006.html; https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/
CVE: CVE-2022-23104
Published: 2022-02-24
Description: WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the program Operator Workspace directory, which holds DLL files and executables. A low-privilege attacker could write a malicious DLL file to the Operator Workspace directory to achieve privilege escalation and the permissions of the user running the program.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://supportdesk.win911.com/support/solutions/articles/[PII_REDACTED]3-win-911-2021-r1-r2-file-permission-vulnerability; https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-03; https://supportdesk.win911.com/support/solutions/articles/[PII_REDACTED]3-win-911-2021-r1-r2-file-permission-vulnerability
CVE: CVE-2022-23135
Published: 2022-02-24
Description: There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which will cause information leak and affect device operation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1023444; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1023444
CVE: CVE-2022-23922
Published: 2022-02-24
Description: WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://supportdesk.win911.com/support/solutions/articles/[PII_REDACTED]3-win-911-2021-r1-r2-file-permission-vulnerability; https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-03; https://supportdesk.win911.com/support/solutions/articles/[PII_REDACTED]3-win-911-2021-r1-r2-file-permission-vulnerability
CVE: CVE-2022-24232
Published: 2022-02-24
Description: A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-829
References: https://github.com/09-by-ly/test; https://github.com/09-by-ly/test
CVE: CVE-2022-25003
Published: 2022-02-24
Description: Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/view_doctor.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/09-by-ly/HPRMS-SQL_injection/blob/gh-pages/SQL%20injection.md; https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-25003; https://www.nu11secur1ty.com/2022/03/cve-2022-25003.html
CVE: CVE-2022-25004
Published: 2022-02-24
Description: Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/manage_doctor.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/09-by-ly/HPRMS-SQL_injection/blob/gh-pages/SQL%20injection.md; https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-25004/; https://www.nu11secur1ty.com/2022/03/cve-2022-25004.html
CVE: CVE-2022-25148
Published: 2022-02-24
Description: The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/174482/WordPress-WP-Statistics-13.1.5-SQL-Injection.html; https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=
CVE: CVE-2022-25149
Published: 2022-02-24
Description: The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25149
CVE: CVE-2022-25305
Published: 2022-02-24
Description: The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/includes/class-wp-statistics-ip.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site administrators view a sites statistics, in versions up to and including 13.1.5.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://gist.github.com/Xib3rR4dAr/af90cef7867583ab2de4cccea2a8c87d; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25305
CVE: CVE-2022-25306
Published: 2022-02-24
Description: The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the browser parameter found in the ~/includes/class-wp-statistics-visitor.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site administrators view a sites statistics, in versions up to and including 13.1.5.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://gist.github.com/Xib3rR4dAr/89fc87ea1d62348c21c99fc11a3bfd88; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25306
CVE: CVE-2022-25307
Published: 2022-02-24
Description: The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site administrators view a sites statistics, in versions up to and including 13.1.5.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://gist.github.com/Xib3rR4dAr/8090a6d026d4601083cff80aa80de7eb; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25307
CVE: CVE-2022-24709
Published: 2022-02-24
Description: @awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Users are advised to upgrade to version 3.0.367 or later. There are no known workarounds for this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://github.com/aws/awsui-documentation/security/advisories/GHSA-mf22-92pm-m8p8; https://www.npmjs.com/package/%40awsui/components-react; https://github.com/aws/awsui-documentation/security/advisories/GHSA-mf22-92pm-m8p8
CVE: CVE-2021-44664
Published: 2022-02-24
Description: An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploading a maliciously crafted PHP file though the project interface disguised as a language file to bypasses the upload filters. Attackers can manipulate the files destination by abusing path traversal in the 'mediapath' variable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-434
References: http://packetstormsecurity.com/files/166182/Xerte-3.9-Remote-Code-Execution.html; https://github.com/thexerteproject/xerteonlinetoolkits/commit/1672d6f46bbd6f6d42f0903ce9a313927ae2836b#diff-27433bb0be90e431d40986f9afebe9ee2f8d1025a7f9e55c3cd7a86f1f8e3fdc; https://github.com/thexerteproject/xerteonlinetoolkits/commit/6daeb81d089d4a561e22f931fff1327660a7d1b5
CVE: CVE-2021-44665
Published: 2022-02-24
Description: A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/166181/Xerte-3.10.3-Directory-Traversal.html; https://github.com/thexerteproject/xerteonlinetoolkits/commit/48a9880c6ac38f4d215f9143baf3d6e6062a1871; http://packetstormsecurity.com/files/166181/Xerte-3.10.3-Directory-Traversal.html
CVE: CVE-2021-29216
Published: 2022-02-24
Description: A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04228en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04228en_us
CVE: CVE-2021-29217
Published: 2022-02-24
Description: A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04228en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04228en_us
CVE: CVE-2021-29220
Published: 2022-02-24
Description: Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.12. These vulnerabilities could be exploited by a highly privileged user to remotely execute code that could lead to a loss of confidentiality, integrity, and availability. HPE has provided a software update to resolve this vulnerability in HPE iLO Amplifier Pack.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04246en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04246en_us
CVE: CVE-2021-39363
Published: 2022-02-24
Description: Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://buildings.honeywell.com/content/dam/hbtbt/en/documents/downloads/Security_Notification_SN_2022-01-26-01_CVE-2021-39363_Command_Injection_HDZP252DI.pdf; https://buildings.honeywell.com/us/en/brands/our-brands/security/support-and-resources/product-resources/eol-and-security-notices; https://www.honeywell.com/us/en/product-security
CVE: CVE-2021-39364
Published: 2022-02-24
Description: Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP cache poisoning has been achieved.
CVSS Score: 7.5 (HIGH)
CWE: CWE-294
References: https://buildings.honeywell.com/content/dam/hbtbt/en/documents/downloads/Security_Notification_SN_2022-01-26-02_CVE-2021-39364_Video_Replay_HBW2PER1.pdf; https://buildings.honeywell.com/us/en/brands/our-brands/security/support-and-resources/product-resources/eol-and-security-notices; https://www.honeywell.com/us/en/product-security
CVE: CVE-2021-43745
Published: 2022-02-24
Description: A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/zadam/trilium/issues/2340; https://github.com/zadam/trilium/issues/2340
CVE: CVE-2022-23701
Published: 2022-02-24
Description: A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60. This vulnerability could be remotely exploited to allow an attacker to supply invalid input to the iLO 4 webserver, causing it to respond with a redirect to an attacker-controlled domain. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 4 (iLO 4).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04249en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04249en_us
CVE: CVE-2022-23835
Published: 2022-02-25
Description: The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporarily controls an application that has the READ_SMS permission, and reads an IMAP credentialing message that is (by design) not displayed to the victim within the AOSP SMS/MMS messaging application. (Often, the IMAP credentials are usable to listen to voice mail messages sent before the vulnerability was exploited, in addition to new ones.) NOTE: some vendors characterize this as not a "concrete and exploitable risk.
CVSS Score: 8.1 (HIGH)
CWE: CWE-668
References: https://gitlab.com/kop316/vvm-disclosure; https://www.kb.cert.org/vuls/id/383864; https://gitlab.com/kop316/vvm-disclosure