rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-31772 IBM MQ denial of service

IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.


Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: IBM
product: MQ
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-11-11T18:56:12.717Z
CVE-2022-31773 
IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 228357.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2022-08-26T17:25:12.579Z
CVE-2022-31774 
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 228358.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2022-07-31T16:05:55.923Z
CVE-2022-31775 
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228359.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2022-07-31T16:06:37.375Z
CVE-2022-31776 
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 228433.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2022-07-31T16:07:13.000Z
CVE-2022-31777 Apache Spark XSS vulnerability in log viewer UI Javascript
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.
Problem types: cwe_id: CWE-74
description: CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affected products: vendor: Apache Software Foundation
product: Apache Spark
Credits: lang: en
value: Florian Walter (Veracode)
Published: 2022-11-01T00:00:00.000Z
CVE-2022-31778 Transfer-Encoding not treated as hop-by-hop
Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Credits: lang: en
value: Apache Traffic Server would like to thank Chris Lemmons for reporting this issue.
Published: 2022-08-10T00:00:00.000Z
CVE-2022-31779 Improper HTTP/2 scheme and method validation
Improper Input Validation vulnerability in HTTP/2 header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Credits: lang: en
value: Apache Traffic Server would like to thank Dhana Sekaran for reporting this issue.
Published: 2022-08-10T05:50:40.000Z
CVE-2022-31780 HTTP/2 framing vulnerabilities
Improper Input Validation vulnerability in HTTP/2 frame handling of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Credits: lang: en
value: Apache Traffic Server would like to thank Bahruz Jabiyev, Steven Sprecher, Anthony Gavazzi, Tommaso Innocenti, Kaan Onarlioglu, and Engin Kirda for reporting these issues.
Published: 2022-08-10T00:00:00.000Z
CVE-2022-31781 Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)
Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles Content Types. Specially crafted Content Types may cause catastrophic backtracking, taking exponential time to complete. Specifically, this is about the regular expression used on the parameter of the org.apache.tapestry5.http.ContentType class. Apache Tapestry 5.8.2 has a fix for this vulnerability. Notice the vulnerability cannot be triggered by web requests in Tapestry code alone. It would only happen if there's some non-Tapestry codepath passing some outside input to the ContentType class constructor.
Problem types: cwe_id: CWE-1333
description: CWE-1333 Inefficient Regular Expression Complexity
Affected products: vendor: Apache Software Foundation
product: Apache Tapestry
Credits: lang: en
value: CodeQL team members [@atorralba (Tony Torralba)](https://github.com/atorralba) and [@joefarebrother (Joseph Farebrother)](https://github.com/joefarebrother).
Published: 2022-07-13T07:25:10.000Z
CVE-2022-31782 
ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T21:10:35.000Z
CVE-2022-31783 
Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-27T00:00:00.000Z
CVE-2022-31784 
A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could allow an unauthenticated attacker (that has network access to the management interface) to conduct a buffer overflow attack due to insufficient validation of URL parameters. A successful exploit could allow arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T11:43:09.000Z
CVE-2022-31786 
IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-21T14:06:19.000Z
CVE-2022-31787 
IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-22T14:38:41.000Z
CVE-2022-31788 
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-10T12:08:06.000Z
CVE-2022-31789 
An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-06T18:16:40.000Z
CVE-2022-31790 
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-06T17:54:41.000Z
CVE-2022-31791 
WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-06T18:26:38.000Z
CVE-2022-31792 
A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker can potentially execute arbitrary JavaScript code in the management web interface by sending crafted requests to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-06T18:24:45.000Z
CVE-2022-31793 
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-04T21:55:05.000Z
CVE-2022-31794 
An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hw_view.php. An attacker is able to influence the unitName POST parameter and inject special characters such as semicolons, backticks, or command-substitution sequences in order to force the application to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-20T14:38:29.000Z
CVE-2022-31795 
An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the grel_finfo function in grel.php. An attacker is able to influence the username (user), password (pw), and file-name (file) parameters and inject special characters such as semicolons, backticks, or command-substitution sequences in order to force the application to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-20T14:41:14.000Z
CVE-2022-31796 
libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-29T16:37:32.000Z
CVE-2022-31798 
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T22:15:45.000Z
CVE-2022-31799 
Bottle before 0.12.20 mishandles errors during early request binding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-29T21:25:44.000Z
CVE-2022-31800 Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers
An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Problem types: cwe_id: CWE-345
description: CWE-345 Insufficient Verification of Data Authenticity
Affected products: vendor: PHOENIX CONTACT
product: ILC 1x0
vendor: PHOENIX CONTACT
product: ILC 1x1
vendor: PHOENIX CONTACT
product: ILC 1x1 GSM/GPRS
vendor: PHOENIX CONTACT
product: ILC 3xx
vendor: PHOENIX CONTACT
product: AXC 1050
vendor: PHOENIX CONTACT
product: AXC 1050 XC
vendor: PHOENIX CONTACT
product: AXC 3050
vendor: PHOENIX CONTACT
product: RFC 480S PN 4TX
vendor: PHOENIX CONTACT
product: RFC 470 PN 3TX
vendor: PHOENIX CONTACT
product: RFC 470S PN 3TX
vendor: PHOENIX CONTACT
product: RFC 460R PN 3TX
vendor: PHOENIX CONTACT
product: RFC 460R PN 3TX-S
vendor: PHOENIX CONTACT
product: RFC 430 ETH-IB
vendor: PHOENIX CONTACT
product: RFC 450 ETH-IB
vendor: PHOENIX CONTACT
product: PC WORX SRT
vendor: PHOENIX CONTACT
product: PC WORX RT BASIC
vendor: PHOENIX CONTACT
product: FC 350 PCI ETH
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: This vulnerability was reported by Forescout.
Published: 2022-06-21T08:00:19.264Z
CVE-2022-31801 Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device.
Problem types: cwe_id: CWE-345
description: CWE-345 Insufficient Verification of Data Authenticity
Affected products: vendor: PHOENIX CONTACT
product: MULTIPROG
vendor: PHOENIX CONTACT
product: ProConOS
vendor: PHOENIX CONTACT
product: ProConOS eCLR
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: This vulnerability was reported by Forescout.
Published: 2022-06-21T08:00:31.688Z
CVE-2022-31802 Partial string comparison in CODESYS gateway server
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.
Problem types: cwe_id: CWE-187
description: CWE-187 Partial String Comparison
Affected products: vendor: CODESYS
product: CODESYS Gateway Server V2
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-06-24T07:46:09.625Z
CVE-2022-31803 CODESYS Gateway Server V2 prone to Denial of Service Attack
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections are not affected and therefore remain intact.
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: CODESYS
product: CODESYS Gateway Server V2
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2022-06-24T07:46:11.188Z
CVE-2022-31804 CODESYS Gateway server prone to denial of service attack due to excessive memory allocation
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.
Problem types: cwe_id: CWE-789
description: CWE-789: Memory Allocation with Excessive Size Value
Affected products: vendor: CODESYS
product: CODESYS Gateway Server V2
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2022-06-24T07:46:13.080Z
CVE-2022-31805 Insecure transmission of credentials
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Problem types: cwe_id: CWE-523
description: CWE-523 Unprotected Transport of Credentials
Affected products: vendor: CODESYS
product: CODESYS Development System
default_status: unaffected
vendor: CODESYS
product: CODESYS Gateway Client
default_status: unaffected
vendor: CODESYS
product: CODESYS Gateway Server
default_status: unaffected
vendor: CODESYS
product: CODESYS Web server
default_status: unaffected
vendor: CODESYS
product: CODESYS SP Realtime NT
default_status: unaffected
vendor: CODESYS
product: CODESYS PLCWinNT
default_status: unaffected
vendor: CODESYS
product: CODESYS Runtime Toolkit 32 bit full
default_status: unaffected
vendor: CODESYS
product: CODESYS Edge Gateway for Windows
default_status: unaffected
vendor: CODESYS
product: CODESYS HMI (SL)
default_status: unaffected
vendor: CODESYS
product: CODESYS OPC DA Server SL
default_status: unaffected
vendor: CODESYS
product: CODESYS PLCHandler
default_status: unaffected
vendor: CODESYS
product: CODESYS Gateway
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2022-06-24T07:46:15.076Z
CVE-2022-31806 Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT
In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.
Problem types: cwe_id: CWE-1188
description: CWE-1188 Insecure Default Initialization of Resource
Affected products: vendor: CODESYS
product: CODESYS PLCWinNT
vendor: CODESYS
product: CODESYS Runtime Toolkit 32 bit full
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-06-24T07:46:17.024Z
CVE-2022-31807 
A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions). Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a remote attacker who is able to intercept the transfer of a valid firmware from the server to the device could modify the firmware "on the fly".
Problem types: cwe_id: CWE-347
description: CWE-347: Improper Verification of Cryptographic Signature
Affected products: vendor: Siemens
product: Building X - Security Manager Edge Controller (ACC-AP)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
baseScore: 6.2
baseSeverity: MEDIUM
Published: 2025-05-23T15:03:38.535Z
CVE-2022-31808 
A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface.

This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Siemens
product: SiPass integrated AC5102 (ACC-G2)
default_status: unknown
vendor: Siemens
product: SiPass integrated ACC-AP
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
baseScore: 7.8
baseSeverity: HIGH
Published: 2023-02-14T10:36:07.859Z
CVE-2022-31810 
A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow.

This could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Siemens
product: SiPass integrated
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
baseScore: 7.5
baseSeverity: HIGH
Published: 2023-07-11T09:07:03.150Z
CVE-2022-31812 
A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets. This could allow an unauthenticated remote attacker to create a denial of service condition.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Siemens
product: SiPass integrated
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
baseScore: 7.5
baseSeverity: HIGH
Published: 2025-05-23T15:03:39.864Z
CVE-2022-31813 mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.
Problem types: cwe_id: CWE-348
description: CWE-348 Use of Less Trusted Source
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: The Apache HTTP Server project would like to thank Gaetan Ferry (Synacktiv) for reporting this issue
Published: 2022-06-08T10:00:57.000Z
CVE-2022-31814 
pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-05T00:00:00.000Z
CVE-2022-31827 
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-09T13:35:03.000Z
CVE-2022-31830 
Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-09T13:35:02.000Z
CVE-2022-31836 
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-05T00:00:00.000Z