yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-3877: A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected is an unknown function of the component URL Field Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. VDB-216246 is the identifier assigned to this vulnerability.
Key phrases: cross site scripting, cross-site scripting
CVE-2022-38770: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users' data upon a successful login request.
Key phrases: fetch other users' data upon a successful
CVE-2022-38771: The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request.
Key phrases: send SCRIPT tags as injected input to the, script tags
CVE-2022-38772: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
Key phrases: make database changes that lead to remote code, remote code execution
CVE-2022-38773: Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use this to replace the boot image of the device and execute arbitrary code.
Key phrases: execute arbitrary code, integrity
CVE-2022-38774: An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Key phrases: elevate their privileges to those of the LocalSystem, elevate privileges
CVE-2022-38775: An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Key phrases: elevate their privileges to those of the LocalSystem, elevate privileges
CVE-2022-38777: An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Key phrases: elevate their privileges to those of the LocalSystem, elevate privileges
CVE-2022-38778: A flaw (CVE-2022-38900) was discovered in one of Kibanas third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.
Key phrases: perform a request that crashes the Kibana server, crashes the kibana server process
CVE-2022-38779: An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.
Key phrases: open redirect issue
CVE-2022-3878: A vulnerability classified as critical has been found in Maxon ERP. This affects an unknown part of the file /index.php/purchase_order/browse_data. The manipulation of the argument tb_search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213039.
Key phrases: sql injection
CVE-2022-38784: Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
Key phrases: integer overflow, crash, arbitrary code
CVE-2022-38786: Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Key phrases: potentially enable escalation of privilege via local access, improper access control, escalation privilege
CVE-2022-38787: Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalation of privilege via local access.
Key phrases: potentially enable escalation of privilege via local access, improper input validation, escalation privilege
CVE-2022-38788: An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and (after offline cracking) retrieve the PIN and LTK (long-term key).
Key phrases: passively intercept a paring handshake and (after, outdated pairing mechanisms
CVE-2022-38789: An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference.
Key phrases: change the main/guest SSID and the, insecure direct object reference
CVE-2022-3879: The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org
Key phrases: activate arbitrary plugins, call it and install and activate arbitrary plugins, csrf
CVE-2022-38790: Weave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a malicious user to inject a javascript: link in the UI. When clicked by a victim user, the script will execute with the victim's permission. The exposure appears in Weave GitOps Enterprise UI via a GitopsCluster dashboard link. An annotation can be added to a GitopsCluster custom resource.
Key phrases: inject a javascript: link in the UI, cross-site scripting (xss) bug
CVE-2022-38791: In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
Key phrases: trigger a deadlock
CVE-2022-38792: The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.
Key phrases: code execution backdoor
CVE-2022-38794: Zaver through 2020-12-15 allows directory traversal via the GET /.. substring.
Key phrases: directory traversal via the GET /.. substring
CVE-2022-38795: In Gitea through 1.17.1, repo cloning can occur in the migration function.
CVE-2022-38796: A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header. This can be exploited by abusing password reset emails.
Key phrases: spoof a particular header, host header injection, spoofing
CVE-2022-3880: The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan WordPress plugin before 4.20 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org
Key phrases: activate arbitrary plugins, call it and install and activate arbitrary plugins, csrf
CVE-2022-38801: In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting.
Key phrases: administrator session, cookies, blind cross-site scripting, hijack
CVE-2022-38802: Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual log, time interval, attshift, and holiday. An authenticated administrator can read local files by exploiting XSS into a pdf generator when exporting data as a PDF
Key phrases: incorrect access control, xss
CVE-2022-38803: Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An authenticated employee can read local files by exploiting XSS into a pdf generator when exporting data as a PDF
Key phrases: incorrect access control, xss
CVE-2022-38808: ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.
Key phrases: sql injection
CVE-2022-3881: The WP Tools Increase Maximum Limits, Repair, Server PHP Info, Javascript errors, File Permissions, Transients, Error Log WordPress plugin before 3.43 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org
Key phrases: activate arbitrary plugins, call it and install and activate arbitrary plugins, csrf
CVE-2022-38812: AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.
Key phrases: sql injection
CVE-2022-38813: PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report.
Key phrases: access all data of users
CVE-2022-38814: A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfg_loid text field.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, stored cross-site scripting (xss)
CVE-2022-38817: Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
Key phrases: obtain sensitive data, incorrect access control
CVE-2022-3882: The Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin WordPress plugin before 2.46 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org
Key phrases: activate arbitrary plugins, call it and install and activate arbitrary plugins, memory usage, memory limit, csrf
CVE-2022-38823: In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
Key phrases: hard coded password
CVE-2022-38826: In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
Key phrases: execute arbitrary command, arbitrary commands
CVE-2022-38827: TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
Key phrases: buffer overflow
CVE-2022-38828: TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
Key phrases: command injection
CVE-2022-38829: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
Key phrases: buffer overflow
CVE-2022-3883: The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 7.24 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins from wordpress.org
Key phrases: activate arbitrary plugins, call it and install and activate arbitrary plugins, csrf
CVE-2022-38830: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
Key phrases: buffer overflow
CVE-2022-38831: Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
Key phrases: buffer overflow
CVE-2022-38832: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=.
Key phrases: sql injection
CVE-2022-38833: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view&id=.
Key phrases: sql injection
CVE-2022-3884: Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01.
Key phrases: read and write specific files, incorrect default permissions
CVE-2022-38840: cgi-bin/xmlstatus.cgi in Gralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upload, which leads to local file disclosure.
Key phrases: xml external entity (xxe) issue, local file disclosure, file upload
CVE-2022-38841: Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page.
Key phrases: os command injection, shell metacharacters
CVE-2022-38843: EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server.
Key phrases: upload malicious file with any extension to the, unrestricted file upload, compromise
CVE-2022-38844: CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloads capable of executing system commands. Admin user exporting contacts in CSV file may end up executing the malicious system commands on his system.
Key phrases: run system commands via creating contacts with payloads, csv injection
CVE-2022-38845: Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending crafted csv file containing malicious JavaScript to authenticated user. Any authenticated user importing the crafted CSV file may end up running the malicious JavaScripting in the browser.
Key phrases: run malicious JavaScript in victim s browser via, cross site scripting
CVE-2022-38846: EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). An attacker may capture the cookie from the insecure channel using MITM attack.
Key phrases: send plain text cookies over an insecure channel, missing secure flag, mitm
CVE-2022-3885: Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: use after free, heap corruption
CVE-2022-38850: The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c.
Key phrases: divide by zero
CVE-2022-38851: Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: out-of-bounds read
CVE-2022-38853: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: buffer overflow
CVE-2022-38855: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: buffer overflow
CVE-2022-38856: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: buffer overflow
CVE-2022-38858: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: buffer overflow
CVE-2022-3886: Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: use after free, heap corruption
CVE-2022-38860: Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: divide by zero
CVE-2022-38861: The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
Key phrases: memory corruption
CVE-2022-38862: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: buffer overflow
CVE-2022-38863: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.
Key phrases: buffer overflow
CVE-2022-38864: Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.
Key phrases: buffer overflow
CVE-2022-38865: Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c. This affects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: divide by zero
CVE-2022-38866: Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Key phrases: buffer overflow
CVE-2022-38867: SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, and 4.0.2 in api.go, allows attackers to execute arbitrary code.
Key phrases: execute arbitrary code, sql injection
CVE-2022-38868: SQL Injection vulnerability in Ehoney version 2.0.0 in models/protocol.go and models/images.go, allows attackers to execute arbitrary code.
Key phrases: execute arbitrary code, sql injection
CVE-2022-3887: Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: use after free, heap corruption
CVE-2022-38870: Free5gc v3.2.1 is vulnerable to Information disclosure.
Key phrases: information disclosure
CVE-2022-38871: In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.
Key phrases: malformed nas messages
CVE-2022-38873: D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106 and earlier, DAP-2695 v1.20rc119_beta31 and earlier, DAP-3320 v1.05rc027 beta and earlier, DAP-3662 v1.05rc047 and earlier allows attackers to cause a Denial of Service (DoS) via uploading a crafted firmware after modifying the firmware header.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), denial of service (dos), firmware header
CVE-2022-38877: Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.
Key phrases: arbitrary code execution
CVE-2022-38878: School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=.
Key phrases: sql injection
CVE-2022-3888: Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: use after free, heap corruption
CVE-2022-38880: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-38881: The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-38882: The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-38883: The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-38884: The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-38885: The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-38886: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-38887: The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-3889: Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: type confusion, heap corruption
CVE-2022-38890: Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h
Key phrases: segmentation violation
CVE-2022-3890: Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Key phrases: heap buffer overflow, sandbox escape
CVE-2022-38900: decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.
Key phrases: improper input validation, dos
CVE-2022-38901: A Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the description field of uploaded svg file.
Key phrases: inject arbitrary JS script or HTML, inject arbitrary JS script or HTML into the, cross-site scripting (xss), file upload
CVE-2022-38902: A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the name field of newly created topic.
Key phrases: inject arbitrary JS script or HTML, inject arbitrary JS script or HTML into the, cross-site scripting (xss)
CVE-2022-3891: The WP FullCalendar WordPress plugin before 1.5 does not ensure that the post retrieved via an AJAX action is public and can be accessed by the user making the request, allowing unauthenticated attackers to get the content of arbitrary posts, including draft/private as well as password-protected ones.
Key phrases: get the content of arbitrary posts
CVE-2022-38916: A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files
Key phrases: upload malicious files, file upload
CVE-2022-3892: The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting
CVE-2022-38922: BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'users-cookie-settings' token using a Time-based blind SLEEP payload.
Key phrases: MySQL Injection in the 'users-cookie, mysql injection
CVE-2022-38923: BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User-Agent' field using a Time-based blind SLEEP payload.
Key phrases: MySQL Injection in the 'User-Agent, mysql injection
CVE-2022-38928: XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.
Key phrases: null pointer dereference
CVE-2022-3893: Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application.
Key phrases: inject arbitrary HTML, inject arbitrary HTML into the custom menu navigation, cross-site scripting (xss), arbitrary html
CVE-2022-38931: A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.
Key phrases: make arbitrary requests, force the application to make arbitrary requests via, server-side request forgery (ssrf)
CVE-2022-38932: readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.
Key phrases: RCE when parsing a crafted ELF file, global overflow, rce
CVE-2022-38934: readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.
Key phrases: arbitrary address read
CVE-2022-38935: An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges.
Key phrases: gain escalated privileges, escalate privilege
CVE-2022-38936: An issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function pbc_wmessage_integer in src/wmessage.c:137.
Key phrases: segv issue
CVE-2022-3894: The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not ensure that the object to be deleted is actually a client, which could allow attackers to make a logged in admin delete arbitrary client and post via a CSRF attack.
Key phrases: make a logged in admin delete arbitrary client, csrf check
CVE-2022-3895: Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).
Key phrases: output arbitrary HTML, xss
CVE-2022-38955: An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.
Key phrases: bypass the CRC check, exploitable firmware modification, mitm, backdoor, device dos
CVE-2022-38956: An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.1_1.1.9 and earlier.
Key phrases: exploitable firmware downgrade, mitm
CVE-2022-3896: The WP Affiliate Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER["REQUEST_URI"] in versions up to, and including, 6.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This is unlikely to work in modern browsers.
Key phrases: inject arbitrary web scripts, reflected cross-site scripting
CVE-2022-3897: The WP Affiliate Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 6.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2022-38970: ieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices.
Key phrases: establish direct connections to arbitrary devices, incorrect access control, predictability flaw
CVE-2022-38971: Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form  Registration Form  Profile Form for User Profiles and Content Forms for User Submissions plugin <=2.7.5 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2022-38972: Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inject an arbitrary script.
Key phrases: inject an arbitrary script, cross-site scripting
CVE-2022-38973: Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow an authenticated user to potentially enable denial of service or infomation disclosure via local access.
Key phrases: potentially enable denial of service or infomation disclosure, improper access control, local access
CVE-2022-38974: Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs.
Key phrases: change the status of the translation jobs, broken access control
CVE-2022-38975: DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user of the product to visit a specially crafted page.
Key phrases: inject an arbitrary script by having an administrative, dom-based cross-site scripting
CVE-2022-38977: The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification of sensitive data.
Key phrases: heap overflow, out-of-bounds writes, sensitive data, out of bounds write
CVE-2022-38978: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: configuration defects, data confidentiality
CVE-2022-38979: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: configuration defects, data confidentiality
CVE-2022-3898: The WP Affiliate Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.9. This is due to missing or incorrect nonce validation on various functions including the affiliates_menu method. This makes it possible for unauthenticated attackers to delete affiliate records, via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Key phrases: cross-site request forgery, forged request
CVE-2022-38980: The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions.
Key phrases: obtain process control permissions, heap overflow
CVE-2022-38981: The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage.
Key phrases: out-of-bounds read, information leakage, out of bounds read
CVE-2022-38982: The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked.
Key phrases: service logic errors, cracked
CVE-2022-38983: The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution.
Key phrases: use-after-free (uaf), arbitrary code execution
CVE-2022-38984: The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.
Key phrases: hipp module, out-of-bounds read, data confidentiality, out of bounds read
CVE-2022-38985: The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: input validation, data confidentiality
CVE-2022-38986: The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause out-of-bounds access to the HIPP module and page table tampering, affecting device confidentiality and availability.
Key phrases: hipp module, out-of-bounds access, page table tampering, device confidentiality, availability, out of bounds access
CVE-2022-38987: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.
Key phrases: configuration defects, system availability
CVE-2022-38988: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: configuration defects, data confidentiality
CVE-2022-38989: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.
Key phrases: configuration defects, system availability
CVE-2022-38990: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.
Key phrases: configuration defects, system availability
CVE-2022-38991: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: configuration defects, data confidentiality
CVE-2022-38992: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: configuration defects, data confidentiality
CVE-2022-38993: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.
Key phrases: configuration defects, system availability
CVE-2022-38994: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: configuration defects, data confidentiality
CVE-2022-38995: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.
Key phrases: configuration defects, system availability
CVE-2022-38996: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.
Key phrases: configuration defects, system availability
CVE-2022-38997: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: configuration defects, data confidentiality
CVE-2022-38998: The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.
Key phrases: hisp module, out-of-bounds read, data confidentiality, out of bounds read
CVE-2022-38999: The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability.
Key phrases: improper update of reference count, data integrity, availability, confidentiality
CVE-2022-3900: The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability.
Key phrases: trigger a PHP Object injection vulnerability, php object injection
CVE-2022-39000: The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.
Key phrases: iaware module
CVE-2022-39001: The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure.
Key phrases: path traversal, data disclosure
CVE-2022-39002: Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice.
Key phrases: double free, freed twice
CVE-2022-39003: Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted components.
Key phrases: buffer overflow, confidentiality, confidentiality and integrity
CVE-2022-39004: The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.
Key phrases: memory leak, memory leaks
CVE-2022-39005: The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks.
Key phrases: memory leak, memory leaks
CVE-2022-39006: The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.
Key phrases: race condition, restart
CVE-2022-39007: The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation.
Key phrases: location module, privilege escalation
CVE-2022-39008: The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and write files that are accessible only to system apps.
Key phrases: bundle serialization deserialization, to write files
CVE-2022-39009: The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functions.
Key phrases: permission verification, wlan functions
CVE-2022-3901: Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system.
Key phrases: execute XSS on the client system, prototype pollution, xss
CVE-2022-39010: The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of user network information.
Key phrases: hwchrservice module, permission control, disclosure of user network information
CVE-2022-39011: The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access to the HISP module.
Key phrases: hisp module, unauthorized access
CVE-2022-39012: Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal.
Key phrases: input validation, abnormal, improper input validation, service abnormal
CVE-2022-39013: Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and low impact on integrity and availability of the application.
Key phrases: os credentials, high impact on confidentiality, integrity, integrity and availability
CVE-2022-39014: Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted.
Key phrases: access certain unencrypted sensitive parameters which would otherwise, restricted
CVE-2022-39015: Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be restricted.
Key phrases: access information which would otherwise be restricted
CVE-2022-39016: Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload.
Key phrases: perform an account takeover via a crafted PDF, javascript injection
CVE-2022-39017: Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.
Key phrases: introduce cross-site scripting attacks via specially, improper input validation, output encoding
CVE-2022-39018: Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL.
Key phrases: access restricted PDF files via a known URL, broken access controls
CVE-2022-39019: Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the application server.
Key phrases: upload malicious files to the application server, broken access controls
CVE-2022-3902: An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible for a project maintainer to unmask webhook secret tokens by reviewing the logs after testing webhooks.
Key phrases: webhook secret tokens
CVE-2022-39020: Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting.
Key phrases: xss, cross-site scripting, file upload
CVE-2022-39021: U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user to arbitrary website.
Key phrases: open redirect, arbitrary website
CVE-2022-39022: U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.
Key phrases: download arbitrary system file, path traversal
CVE-2022-39023: U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.
Key phrases: download arbitrary system file, path traversal
CVE-2022-39024: U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Key phrases: u-office force bulletin function
CVE-2022-39025: U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
Key phrases: u-office force printmessage function
CVE-2022-39026: U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
CVE-2022-39027: U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
CVE-2022-39028: telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a "telnet/tcp server failing (looping), service terminated" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.
Key phrases: null pointer dereference, application crash
CVE-2022-39029: Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information.
Key phrases: inadequate authorization, access sensitive information
CVE-2022-3903: An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.
Key phrases: incorrect read request flaw, denial of service, crashing the system, crash system
CVE-2022-39030: smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.
Key phrases: inadequate authorization, sensitive information, access sensitive information
CVE-2022-39031: Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit this vulnerability to acquire the Session IDs of other general users only.
CVE-2022-39032: Smart eVision has an improper privilege management vulnerability. A remote attacker with general user privilege can exploit this vulnerability to escalate to administrator privilege, and then perform arbitrary system command or disrupt service.
Key phrases: perform arbitrary system command or disrupt, privilege management, disrupt service, improper privilege management
CVE-2022-39033: Smart eVisions file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication, access restricted paths to download and delete arbitrary system files to disrupt service.
Key phrases: delete arbitrary system files, bypass authentication, path traversal, disrupt service
CVE-2022-39034: Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication, access restricted paths and download system files.
Key phrases: bypass authentication, path traversal
CVE-2022-39035: Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.