deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23460
Published: 2022-01-21
Description: The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of key types.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/bpmn-io/min-dash/blob/c4d579c0eb2ed[PII_REDACTED]c3906b198921d3f52/lib/object.js%23L32; https://github.com/bpmn-io/min-dash/pull/21; https://github.com/bpmn-io/min-dash/pull/21/commits/5ab05cbc4fd8d5eafb7db540c491ed0906b9d320
CVE: CVE-2021-23518
Published: 2022-01-21
Description: The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative path. When using the origin path as __proto__, the attribute of the object is accessed instead of a path. **Note:** This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-CACHEDPATHRELATIVE-72573
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/ashaffer/cached-path-relative/commit/40c73bf70c58add5aec7d11e4f36b93d144bb760; https://lists.debian.org/debian-lts-announce/2022/12/msg00006.html; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2348246
CVE: CVE-2021-23631
Published: 2022-01-21
Description: This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a converted PNG file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://gist.github.com/legndery/a248350bb25b8502a03c2f407cedeb14; https://snyk.io/vuln/SNYK-JS-CONVERTSVGCORE-1582785; https://snyk.io/vuln/SNYK-JS-CONVERTSVGTOJPEG-2348245
CVE: CVE-2021-23664
Published: 2022-01-21
Description: The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://github.com/isomorphic-git/cors-proxy/commit/1b1c91e71d946544d97ccc7cf0ac62b859e03311; https://snyk.io/vuln/SNYK-JS-ISOMORPHICGITCORSPROXY-1734788; https://github.com/isomorphic-git/cors-proxy/commit/1b1c91e71d946544d97ccc7cf0ac62b859e03311
CVE: CVE-2021-40595
Published: 2022-01-21
Description: SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leave_system/classes/Login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-03; https://www.sourcecodester.com/php/14910/online-leave-management-system-php-free-source-code.html; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-03
CVE: CVE-2021-36338
Published: 2022-01-21
Description: Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-602, CWE-565
References: https://www.dell.com/support/kbdoc/000194640; https://www.dell.com/support/kbdoc/000194640
CVE: CVE-2021-36339
Published: 2022-01-21
Description: The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://www.dell.com/support/kbdoc/000194640; https://www.dell.com/support/kbdoc/000194640
CVE: CVE-2021-46234
Published: 2022-01-21
Description: A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2023; https://github.com/gpac/gpac/issues/2023
CVE: CVE-2021-46236
Published: 2022-01-21
Description: A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2024; https://github.com/gpac/gpac/issues/2024
CVE: CVE-2021-46237
Published: 2022-01-21
Description: An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2033; https://github.com/gpac/gpac/issues/2033
CVE: CVE-2021-46238
Published: 2022-01-21
Description: GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/2027; https://github.com/gpac/gpac/issues/2027
CVE: CVE-2021-46239
Published: 2022-01-21
Description: The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at utils/alloc.c. This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/gpac/gpac/issues/2026; https://github.com/gpac/gpac/issues/2026
CVE: CVE-2021-46240
Published: 2022-01-21
Description: A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2028; https://github.com/gpac/gpac/issues/2028
CVE: CVE-2021-46242
Published: 2022-01-21
Description: HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://github.com/HDFGroup/hdf5/issues/1329; https://github.com/HDFGroup/hdf5/issues/1329
CVE: CVE-2021-46243
Published: 2022-01-21
Description: An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/HDFGroup/hdf5/issues/1326; https://github.com/HDFGroup/hdf5/issues/1326
CVE: CVE-2021-46244
Published: 2022-01-21
Description: A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c. This vulnerability causes an aritmetic exception, leading to a Denial of Service (DoS).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/HDFGroup/hdf5/issues/1327; https://github.com/HDFGroup/hdf5/issues/1327
CVE: CVE-2021-46311
Published: 2022-01-21
Description: A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2038; https://github.com/gpac/gpac/issues/2038
CVE: CVE-2021-46313
Published: 2022-01-21
Description: The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms (). This vulnerability can lead to a Denial of Service (DoS).
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/gpac/gpac/issues/2039; https://github.com/gpac/gpac/issues/2039
CVE: CVE-2022-22551
Published: 2022-01-21
Description: DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.
CVSS Score: 8.3 (HIGH)
CWE: CWE-598, CWE-384
References: https://www.dell.com/support/kbdoc/000195377; https://www.dell.com/support/kbdoc/000195377
CVE: CVE-2022-22552
Published: 2022-01-21
Description: Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://www.dell.com/support/kbdoc/000195377; https://www.dell.com/support/kbdoc/000195377
CVE: CVE-2022-22553
Published: 2022-01-21
Description: Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are used by users.
CVSS Score: 8.1 (HIGH)
CWE: CWE-307, CWE-307
References: https://www.dell.com/support/kbdoc/000195377; https://www.dell.com/support/kbdoc/000195377
CVE: CVE-2022-23837
Published: 2022-01-21
Description: In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/TUTUMSPACE/exploits/blob/main/sidekiq.md; https://github.com/mperham/sidekiq/commit/7785ac1399f1b28992adb56055f6acd88fd1d956; https://github.com/rubysec/ruby-advisory-db/pull/495
CVE: CVE-2021-39480
Published: 2022-01-21
Description: Bingrep v0.8.5 was discovered to contain a memory allocation failure which can cause a Denial of Service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/m4b/bingrep/issues/30; https://github.com/m4b/bingrep/issues/30
CVE: CVE-2022-21707
Published: 2022-01-21
Description: wasmCloud Host Runtime is a server process that securely hosts and provides dispatch for web assembly (WASM) actors and capability providers. In versions prior to 0.52.2 actors can bypass capability authorization. Actors are normally required to declare their capabilities for inbound invocations, but with this vulnerability actor capability claims are not verified upon receiving invocations. This compromises the security model for actors as they can receive unauthorized invocations from linked capability providers. The problem has been patched in versions `0.52.2` and greater. There is no workaround and users are advised to upgrade to an unaffected version as soon as possible.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-863, CWE-862
References: https://github.com/wasmCloud/wasmcloud-otp/commit/fd07262074b98b06106a31fd1957dc2319d438a5; https://github.com/wasmCloud/wasmcloud-otp/security/advisories/GHSA-2cmx-rr54-88g5; https://github.com/wasmCloud/wasmcloud-otp/commit/fd07262074b98b06106a31fd1957dc2319d438a5
CVE: CVE-2022-21708
Published: 2022-01-21
Description: graphql-go is a GraphQL server with a focus on ease of use. In versions prior to 1.3.0 there exists a DoS vulnerability that is possible due to a bug in the library that would allow an attacker with specifically designed queries to cause stack overflow panics. Any user with access to the GraphQL handler can send these queries and cause stack overflows. This in turn could potentially compromise the ability of the server to serve data to its users. The issue has been patched in version `v1.3.0`. The only known workaround for this issue is to disable the `graphql.MaxDepth` option from your schema which is not recommended.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-674
References: https://github.com/graph-gophers/graphql-go/commit/eae31ca73eb3473c544710955d1dbebc22605bfe; https://github.com/graph-gophers/graphql-go/security/advisories/GHSA-mh3m-8c74-74xh; https://github.com/graph-gophers/graphql-go/commit/eae31ca73eb3473c544710955d1dbebc22605bfe
CVE: CVE-2022-23363
Published: 2022-01-21
Description: Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/g33kyrash/Online-Banking-system/issues/15; https://github.com/g33kyrash/Online-Banking-system/issues/15
CVE: CVE-2022-23364
Published: 2022-01-21
Description: HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kabirkhyrul/HMS/discussions/4; https://github.com/kabirkhyrul/HMS/discussions/4
CVE: CVE-2022-23365
Published: 2022-01-21
Description: HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kabirkhyrul/HMS/discussions/4; https://github.com/kabirkhyrul/HMS/discussions/4
CVE: CVE-2022-23366
Published: 2022-01-21
Description: HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/165948/Hospital-Management-Startup-1.0-SQL-Injection.html; https://github.com/kabirkhyrul/HMS/discussions/4; https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-23366
CVE: CVE-2022-23807
Published: 2022-01-22
Description: An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://security.gentoo.org/glsa/202311-17; https://www.phpmyadmin.net/security/PMASA-2022-1/; https://security.gentoo.org/glsa/202311-17
CVE: CVE-2022-23808
Published: 2022-01-22
Description: An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://infosecwriteups.com/exploit-cve-2022-23808-85041c6e5b97; https://security.gentoo.org/glsa/202311-17; https://www.phpmyadmin.net/security/PMASA-2022-2/
CVE: CVE-2021-4172
Published: 2022-01-22
Description: Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/star7th/showdoc/commit/409c8a1208bbb847046a[PII_REDACTED]980f2e6219; https://huntr.dev/bounties/c041b693-877b-4456-b463-19e4c9456eee; https://github.com/star7th/showdoc/commit/409c8a1208bbb847046a[PII_REDACTED]980f2e6219
CVE: CVE-2021-4103
Published: 2022-01-23
Description: Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/vanessa219/vditor/commit/8d4d0889dd72b2f839e93a49db3da3a370416c7d; https://huntr.dev/bounties/67b980af-7357-4879-9448-a926c6474225; https://github.com/vanessa219/vditor/commit/8d4d0889dd72b2f839e93a49db3da3a370416c7d
CVE: CVE-2022-23850
Published: 2022-01-23
Description: xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://cwe.mitre.org/data/definitions/121.html; https://github.com/kevinboone/epub2txt2/issues/17; https://cwe.mitre.org/data/definitions/121.html
CVE: CVE-2021-45380
Published: 2022-01-23
Description: AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/source-trace/appcms/issues/8; https://github.com/source-trace/appcms/issues/8
CVE: CVE-2021-46024
Published: 2022-01-23
Description: Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/3; https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/3
CVE: CVE-2021-26706
Published: 2022-01-24
Description: An issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: Mem_PoolCreate, Mem_DynPoolCreate, and Mem_DynPoolCreateHW. Because these functions use multiplication to calculate the pool sizes, the operation may cause an integer overflow if the arguments are large enough. The resulting memory pool will be smaller than expected and may be exploited by an attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://docs.silabs.com/micrium/latest/micrium-common/; https://micrium.atlassian.net/wiki/spaces/libdoc138/; https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
CVE: CVE-2021-30636
Published: 2022-01-24
Description: In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04; https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
CVE: CVE-2021-39293
Published: 2022-01-24
Description: In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf; https://groups.google.com/g/golang-announce/c/dx9d7IOseHw; https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html
CVE: CVE-2022-23852
Published: 2022-01-24
Description: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-190
References: https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf; https://github.com/libexpat/libexpat/pull/550; https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
CVE: CVE-2022-23855
Published: 2022-01-24
Description: An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthenticated user to reset passwords and login as any local account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://www.kb.cert.org/vuls/id/692873; https://www.kb.cert.org/vuls/id/692873
CVE: CVE-2022-23856
Published: 2022-01-24
Description: An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://www.kb.cert.org/vuls/id/692873; https://www.kb.cert.org/vuls/id/692873
CVE: CVE-2022-23857
Published: 2022-01-24
Description: model/criteria/criteria.go in Navidrome before 0.47.5 is vulnerable to SQL injection attacks when processing crafted Smart Playlists. An authenticated user could abuse this to extract arbitrary data from the database, including the user table (which contains sensitive information such as the users' encrypted passwords).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/navidrome/navidrome/commit/9e79b5cbf2a48c1e4344df00fea4ed3844ea965d; https://github.com/navidrome/navidrome/releases/tag/v0.47.5; https://github.com/navidrome/navidrome/commit/9e79b5cbf2a48c1e4344df00fea4ed3844ea965d
CVE: CVE-2022-23858
Published: 2022-01-24
Description: A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.
CVSS Score: 8.8 (HIGH)
References: https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/
CVE: CVE-2021-24423
Published: 2022-01-24
Description: The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, allowing high privilege users to set malicious JavaScript payload in it and leading to a Stored Cross-Site Scripting issue
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-05-09%5D-%5BWordPress%5D-%5BCWE-79%5D-UpdraftPlus-WordPress-Plugin-v1.16.56.txt; https://wpscan.com/vulnerability/541974d6-2df8-4497-9aee-afd3b9024102; https://m0ze.ru/vulnerability/%5B2021-05-09%5D-%5BWordPress%5D-%5BCWE-79%5D-UpdraftPlus-WordPress-Plugin-v1.16.56.txt
CVE: CVE-2021-24694
Published: 2022-01-24
Description: The Simple Download Monitor WordPress plugin before 3.9.11 could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attack via 1) "color" or "css_class" argument of sdm_download shortcode, 2) "class" or "placeholder" argument of sdm_search_form shortcode.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/9d0d8f8c-f8fb-457f-b557-255a052ccc32; https://wpscan.com/vulnerability/9d0d8f8c-f8fb-457f-b557-255a052ccc32
CVE: CVE-2021-24696
Published: 2022-01-24
Description: The Simple Download Monitor WordPress plugin before 3.9.9 does not enforce nonce checks, which could allow attackers to perform CSRF attacks to 1) make admins export logs to exploit a separate log disclosure vulnerability (fixed in 3.9.6), 2) delete logs (fixed in 3.9.9), 3) remove thumbnail image from downloads
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/e94772af-39ac-4743-a556-52351ebda9fe; https://wpscan.com/vulnerability/e94772af-39ac-4743-a556-52351ebda9fe
CVE: CVE-2021-24733
Published: 2022-01-24
Description: The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/a7fa5896-5a1d-44c6-985c-e4abcc53da0e; https://wpscan.com/vulnerability/a7fa5896-5a1d-44c6-985c-e4abcc53da0e
CVE: CVE-2021-24858
Published: 2022-01-24
Description: The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin dashboard, leading to an authenticated SQL Injection
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/9bd1c040-09cc-4c2d-88c9-8406a653a48b; https://wpscan.com/vulnerability/9bd1c040-09cc-4c2d-88c9-8406a653a48b
CVE: CVE-2021-24865
Published: 2022-01-24
Description: The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement, leading to a SQL Injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2648200; https://wpscan.com/vulnerability/055a2dcf-77ec-4e54-be7d-9c47f7730d1b; https://plugins.trac.wordpress.org/changeset/2648200
CVE: CVE-2021-24906
Published: 2022-01-24
Description: The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered) via a crafted request
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/4204682b-f657-42e1-941c-bee7a245e9fd; https://wpscan.com/vulnerability/4204682b-f657-42e1-941c-bee7a245e9fd