stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-23238 (severity: MEDIUM, weakness: NVD-CWE-Other)
Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to view limited metrics information and modify alert email recipients and content.
CVE-2022-23239 (severity: MEDIUM, weakness: CWE-79)
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack.
CVE-2022-2324 (severity: HIGH, weakness: CWE-358)
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and earlier versions
CVE-2022-23240 (severity: MEDIUM, weakness: CWE-284)
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update EMS Subscriptions via unspecified vectors.
CVE-2022-23241 (severity: HIGH, weakness: CWE-284)
Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period.
CVE-2022-23242 (severity: MEDIUM, weakness: CWE-404)
TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password.
CVE-2022-2325 (severity: MEDIUM, weakness: CWE-79)
The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
CVE-2022-23252 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Office Information Disclosure Vulnerability
CVE-2022-23253 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVE-2022-23254 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Power BI Information Disclosure Vulnerability
CVE-2022-23255 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
CVE-2022-23256 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Data Explorer Spoofing Vulnerability
CVE-2022-23257 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-23258 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge for Android Spoofing Vulnerability
CVE-2022-23259 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2022-2326 (severity: HIGH, weakness: CWE-863)
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible to gain access to a private project through an email invite by using other user's email address as an unverified secondary email.
CVE-2022-23261 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2022-23262 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-23263 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-23264 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2022-23265 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Defender for IoT Remote Code Execution Vulnerability
CVE-2022-23266 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Defender for IoT Elevation of Privilege Vulnerability
CVE-2022-23267 (severity: HIGH, weakness: NVD-CWE-Other)
.NET and Visual Studio Denial of Service Vulnerability
CVE-2022-23268 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Hyper-V Denial of Service Vulnerability
CVE-2022-23269 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Dynamics GP Spoofing Vulnerability
CVE-2022-2327 (severity: HIGH, weakness: CWE-416)
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP. Some operations are missing some types, which can lead to incorrect reference counts which can then lead to a double free. We recommend upgrading the kernel past commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859
CVE-2022-23270 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-23271 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
CVE-2022-23272 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
CVE-2022-23273 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
CVE-2022-23274 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics GP Remote Code Execution Vulnerability
CVE-2022-23276 (severity: HIGH, weakness: NVD-CWE-Other)
SQL Server for Linux Containers Elevation of Privilege Vulnerability
CVE-2022-23277 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-23278 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Defender for Endpoint Spoofing Vulnerability
CVE-2022-23279 (severity: HIGH, weakness: NVD-CWE-Other)
Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-2328 (severity: MEDIUM, weakness: CWE-79)
The Flexi Quote Rotator WordPress plugin through 0.9.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-23280 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Outlook for Mac Security Feature Bypass Vulnerability
CVE-2022-23281 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2022-23282 (severity: HIGH, weakness: NVD-CWE-Other)
Paint 3D Remote Code Execution Vulnerability
CVE-2022-23283 (severity: HIGH, weakness: CWE-362)
Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-23284 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-23285 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-23286 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2022-23287 (severity: HIGH, weakness: NVD-CWE-Other)
Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-23288 (severity: HIGH, weakness: NVD-CWE-Other)
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-2329 (severity: CRITICAL, weakness: CWE-190)
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22073)
CVE-2022-23290 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Inking COM Elevation of Privilege Vulnerability
CVE-2022-23291 (severity: HIGH, weakness: NVD-CWE-Other)
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-23292 (severity: LOW, weakness: NVD-CWE-Other)
Microsoft Power BI Spoofing Vulnerability
CVE-2022-23293 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
CVE-2022-23294 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Event Tracing Remote Code Execution Vulnerability
CVE-2022-23295 (severity: HIGH, weakness: NVD-CWE-Other)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2022-23296 (severity: HIGH, weakness: CWE-269)
Windows Installer Elevation of Privilege Vulnerability
CVE-2022-23297 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
CVE-2022-23298 (severity: HIGH, weakness: NVD-CWE-Other)
Windows NT OS Kernel Elevation of Privilege Vulnerability
CVE-2022-23299 (severity: HIGH, weakness: NVD-CWE-Other)
Windows PDEV Elevation of Privilege Vulnerability
CVE-2022-2330 (severity: MEDIUM, weakness: CWE-611)
Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local service that the attacker wouldn't usually have access to via a carefully constructed XML file, which the DLP Agent doesn't parse correctly.
CVE-2022-23300 (severity: HIGH, weakness: NVD-CWE-Other)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2022-23301 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-23302 (severity: HIGH, weakness: CWE-502)
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBindingName configuration causing JMSSink to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-4104. Note this issue only affects Log4j 1.x when specifically configured to use JMSSink, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVE-2022-23303 (severity: CRITICAL, weakness: CWE-203)
The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.
CVE-2022-23304 (severity: CRITICAL, weakness: CWE-203)
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
CVE-2022-23305 (severity: CRITICAL, weakness: CWE-89)
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVE-2022-23307 (severity: HIGH, weakness: CWE-502)
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
CVE-2022-23308 (severity: HIGH, weakness: CWE-416)
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVE-2022-23312 (severity: MEDIUM, weakness: CWE-79)
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.
CVE-2022-23314 (severity: CRITICAL, weakness: CWE-89)
MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.
CVE-2022-23315 (severity: CRITICAL, weakness: CWE-434)
MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.
CVE-2022-23316 (severity: MEDIUM, weakness: CWE-552)
An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.
CVE-2022-23317 (severity: HIGH, weakness: CWE-287)
CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.
CVE-2022-23318 (severity: HIGH, weakness: CWE-787)
A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.
CVE-2022-23319 (severity: MEDIUM, weakness: CWE-1284)
A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent downstream components.
CVE-2022-2332 (severity: HIGH, weakness: CWE-732)
A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment.
CVE-2022-23320 (severity: HIGH, weakness: CWE-287)
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.
CVE-2022-23321 (severity: MEDIUM, weakness: CWE-79)
A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.
CVE-2022-23327 (severity: HIGH, weakness: NVD-CWE-Other)
A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).
CVE-2022-23328 (severity: HIGH, weakness: CWE-400)
A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and then occupy the memory pool to prevent new transactions from entering the pool, resulting in a denial of service (DoS).
CVE-2022-23329 (severity: CRITICAL, weakness: CWE-434)
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.
CVE-2022-2333 (severity: HIGH, weakness: CWE-427)
If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions.
CVE-2022-23330 (severity: HIGH, weakness: NVD-CWE-Other)
A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package.
CVE-2022-23331 (severity: HIGH, weakness: NVD-CWE-Other)
In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password.
CVE-2022-23332 (severity: HIGH, weakness: CWE-94)
Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.
CVE-2022-23334 (severity: CRITICAL, weakness: CWE-347)
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.
CVE-2022-23335 (severity: CRITICAL, weakness: CWE-89)
Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParameter.
CVE-2022-23336 (severity: CRITICAL, weakness: CWE-89)
S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id parameter.
CVE-2022-23337 (severity: CRITICAL, weakness: CWE-89)
DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids parameter.
CVE-2022-2334 (severity: HIGH, weakness: CWE-427)
The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22.
CVE-2022-23340 (severity: CRITICAL, weakness: NVD-CWE-Other)
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
CVE-2022-23342 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users by sending a POST login request to the /mobilebroker/ServiceToBroker.svc/Json/Connect endpoint. This can lead to user enumeration against the underlying Active Directory integrated systems.
CVE-2022-23345 (severity: HIGH, weakness: CWE-306)
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
CVE-2022-23346 (severity: HIGH, weakness: CWE-434)
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
CVE-2022-23347 (severity: HIGH, weakness: CWE-22)
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.
CVE-2022-23348 (severity: MEDIUM, weakness: CWE-916)
BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.
CVE-2022-23349 (severity: HIGH, weakness: CWE-352)
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).
CVE-2022-2335 (severity: HIGH, weakness: CWE-191)
A crafted HTTP packet with a -1 content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
CVE-2022-23350 (severity: MEDIUM, weakness: CWE-79)
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVE-2022-23352 (severity: HIGH, weakness: CWE-835)
An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
CVE-2022-23357 (severity: CRITICAL, weakness: CWE-22)
mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.
CVE-2022-23358 (severity: CRITICAL, weakness: CWE-89)
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement.
CVE-2022-2336 (severity: CRITICAL, weakness: CWE-287)
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as `admin` and password as `admin`. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the `admin` password. There is no warning or prompt to ask the user to change the default password, and to change the password, many steps are required.
CVE-2022-23363 (severity: CRITICAL, weakness: CWE-89)
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.
CVE-2022-23364 (severity: CRITICAL, weakness: CWE-89)
HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php.
CVE-2022-23365 (severity: CRITICAL, weakness: CWE-89)
HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php.
CVE-2022-23366 (severity: CRITICAL, weakness: CWE-89)
HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
CVE-2022-23367 (severity: MEDIUM, weakness: CWE-79)
Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.
CVE-2022-2337 (severity: HIGH, weakness: CWE-476)
A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22.
CVE-2022-23375 (severity: HIGH, weakness: CWE-434)
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
CVE-2022-23376 (severity: MEDIUM, weakness: CWE-79)
WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
CVE-2022-23377 (severity: HIGH, weakness: CWE-552)
Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.
CVE-2022-23378 (severity: MEDIUM, weakness: CWE-79)
A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/allergens/edit/1 is vulnerable.
CVE-2022-23379 (severity: CRITICAL, weakness: CWE-89)
Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().
CVE-2022-2338 (severity: MEDIUM, weakness: CWE-319)
Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration interface is accessible via plaintext HTTP protocol, facilitating the attack. The HTTP request may contain the session cookie in the request, which may be captured for use in authenticating to the server.
CVE-2022-23380 (severity: HIGH, weakness: CWE-89)
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.
CVE-2022-23382 (severity: HIGH, weakness: CWE-400)
Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network.
CVE-2022-23383 (severity: CRITICAL, weakness: CWE-287)
YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non login status because real authentication is not carried out.
CVE-2022-23384 (severity: HIGH, weakness: CWE-352)
YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add
CVE-2022-23387 (severity: HIGH, weakness: CWE-89)
An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field.
CVE-2022-23389 (severity: CRITICAL, weakness: CWE-78)
PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.