yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-40657: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD files. Crafted data in a PSD file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15073.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code
CVE-2022-40658: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15166.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code
CVE-2022-40659: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15214.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code
CVE-2022-4066: A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.
Key phrases: davidmoreno onion
CVE-2022-40660: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15135.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code
CVE-2022-40661: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15134.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code
CVE-2022-40662: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15351.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code
CVE-2022-40663: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF images. Crafted data in a TIF image can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15697.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code
CVE-2022-40664: Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.
Key phrases: Authentication Bypass, authentication bypass
CVE-2022-4067: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.10.0.
Key phrases: cross-site scripting (xss)
CVE-2022-40671: Cross-Site Request Forgery (CSRF) vulnerability in Rate my Post  WP Rating System plugin <= 3.3.4 at WordPress.
Key phrases: cross-site request forgery (csrf)
CVE-2022-40672: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2022-40673: KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache.
CVE-2022-40674: libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
Key phrases: use-after-free, use after free
CVE-2022-40675: Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages.
Key phrases: decrypt and forge protocol communication messages, cryptographic issues
CVE-2022-40676: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code or commands via specially crafted http requests.
Key phrases: execute unauthorized code or commands via specially crafted, cross-site scripting, improper neutralization of input during web page generation
CVE-2022-40677: A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code or commands via specially crafted input parameters.
Key phrases: execute unauthorized code or commands via specially crafted, argument injection
CVE-2022-40678: An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow a local attacker with database access to recover user passwords.
Key phrases: recover user passwords, insufficiently protected credentials, database access
CVE-2022-40679: An improper neutralization of special elements used in an OS command vulnerability [CWE-78]in FortiADC 5.xall versions, 6.0 all versions, 6.1all versions, 6.2.0 through 6.2.4, 7.0.0 through 7.0.3, 7.1.0;FortiDDoS 4.xall versions, 5.0all versions, 5.1all versions, 5.2all versions, 5.3all versions, 5.4all versions, 5.5all versions, 5.6all versions and FortiDDoS-F 6.4.0, 6.3.0 through 6.3.3, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
Key phrases: execute unauthorized commands via specifically crafted arguments to, os command
CVE-2022-4068: A user is able to enable their own account if it was disabled by an admin while the user still holds a valid session. Moreover, the username is not properly sanitized in the admin user overview. This enables an XSS attack that enables an attacker with a low privilege user to execute arbitrary JavaScript in the context of an admin's account.
Key phrases: execute arbitrary JavaScript, xss
CVE-2022-40680: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12, 6.4.0 - 6.4.9 and 7.0.0 - 7.0.3 allows a privileged attacker to execute unauthorized code or commands via storing malicious payloads in replacement messages.
Key phrases: execute unauthorized code or commands via storing malicious, cross-site scripting, malicious payloads, improper neutralization of input during web page generation
CVE-2022-40681: A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to cause denial of service via sending a crafted request to a specific named pipe.
Key phrases: cause denial of service via sending a crafted, incorrect authorization
CVE-2022-40682: A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to execute unauthorized code or commands via sending a crafted request to a specific named pipe.
Key phrases: execute unauthorized code or commands via sending a, incorrect authorization
CVE-2022-40683: A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands
Key phrases: execute unauthorized code or commands via specially crafted, double free
CVE-2022-40684: An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
Key phrases: bypass using an alternate path or channel [CWE-288, authentication bypass, perform operations on the administrative interface via specially, cwe-288
CVE-2022-40685: Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access.
Key phrases: potentially enable information disclosure via network access, insufficiently protected credentials
CVE-2022-40686: Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.
Key phrases: cross-site request forgery (csrf)
CVE-2022-40687: Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.
Key phrases: cross-site request forgery (csrf)
CVE-2022-4069: Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 22.10.0.
Key phrases: cross-site scripting (xss)
CVE-2022-40690: Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.
Key phrases: inject an arbitrary script, cross-site scripting
CVE-2022-40691: An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.
Key phrases: information disclosure, sensitive information
CVE-2022-40692: Cross-Site Request Forgery (CSRF) vulnerability inWP Sunshine Sunshine Photo Cart plugin <= 2.9.13 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2022-40693: A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.
Key phrases: cleartext transmission, disclosure of sensitive information
CVE-2022-40694: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in News Announcement Scroll plugin <= 8.8.8 on WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2022-40695: Multiple Cross-Site Scripting (CSRF) vulnerabilities in SEO Redirection Plugin plugin <= 8.9 on WordPress.
Key phrases: cross-site scripting (csrf)
CVE-2022-40696: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields (ACF): from 3.1.1 through 6.0.2.
Key phrases: exposure of sensitive information
CVE-2022-40697: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in3com  Asesor de Cookies para normativa espaola plugin <=3.4.3 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2022-40698: Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.
Key phrases: cross-site scripting (xss)
CVE-2022-40699: Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr  Yet Another Stars Rating plugin <=3.1.2 versions.
Key phrases: cross-site scripting (xss)
CVE-2022-4070: Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0.
Key phrases: insufficient session expiration
CVE-2022-40701: A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lead to arbitrary file deletion. An attacker can send an HTTP request to trigger this vulnerability.
Key phrases: directory traversal, arbitrary file deletion
CVE-2022-40703: CWE-302 Authentication Bypass by Assumed-Immutable Data in AliveCor Kardia App version5.17.1-754993421 and prior on Android allows an unauthenticated attacker with physical access to the Android device containing the app to bypass application authentication and alter information in the app.
Key phrases: Bypass by Assumed-Immutable Data in AliveCor Kardia App version5.17.1, bypass application authentication, Authentication Bypass, the Android device containing the app to bypass, cwe-302, physical access
CVE-2022-40704: A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.
Key phrases: xss
CVE-2022-40705: An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP. This issue affects Apache SOAP version 2.2 and later versions. It is unknown whether previous versions are also affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: read arbitrary files, read arbitrary files over HTTP, improper restriction of xml external entity reference
CVE-2022-40707: An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40708.
Key phrases: obtain the ability to execute low-privileged, disclose sensitive information on affected installations, out-of-bounds read, out of bounds read
CVE-2022-40708: An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707.
Key phrases: obtain the ability to execute low-privileged, disclose sensitive information on affected installations, out-of-bounds read, out of bounds read
CVE-2022-40709: An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40707 and 40708.
Key phrases: obtain the ability to execute low-privileged, disclose sensitive information on affected installations, out-of-bounds read, out of bounds read
CVE-2022-40710: A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Key phrases: obtain the ability to execute low-privileged, escalate privileges on affected installations
CVE-2022-40711: PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.
Key phrases: target higher-privilege users, stored xss
CVE-2022-40712: An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints.
Key phrases: reflected xss
CVE-2022-40713: An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.
Key phrases: read files on the filesystem arbitrarily, relative path traversal issues
CVE-2022-40714: An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints.
Key phrases: reflected xss
CVE-2022-40715: An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.
Key phrases: read files on the filesystem arbitrarily, absolute path traversal
CVE-2022-40716: HashiCorp Consul and Consul Enterprise up to 1.11.8, 1.12.4, and 1.13.1 do not check for multiple SAN URI values in a CSR on the internal RPC endpoint, enabling leverage of privileged access to bypass service mesh intentions. Fixed in 1.11.9, 1.12.5, and 1.13.2."
Key phrases: bypass service mesh intentions, san uri values, privileged access
CVE-2022-40717: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15727.
Key phrases: execute arbitrary code, execute arbitrary code on affected D-Link, execute code
CVE-2022-40718: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15728.
Key phrases: execute arbitrary code, execute arbitrary code on affected D-Link, execute code
CVE-2022-40719: This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd_generic.lua plugin for the xupnpd service, which listens on TCP port 4044 by default. When parsing the feed parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15906.
Key phrases: execute arbitrary commands, execute arbitrary commands on affected installations of D, execute code
CVE-2022-40720: This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for the xupnpd service, which listens on TCP port 4044 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the router. Was ZDI-CAN-15935.
Key phrases: execute arbitrary commands, execute arbitrary commands on affected installations of D, execute code
CVE-2022-40721: Arbitrary file upload vulnerability in php uploader
Key phrases: arbitrary file upload
CVE-2022-40722: A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.
Key phrases: bypass of offline MFA, pre-computed dictionary, bypass of offline mfa
CVE-2022-40723: The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.
Key phrases: bypass under certain configurations, MFA bypass, mfa bypass
CVE-2022-40724: The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.
Key phrases: cross-site request forgery (csrf)
CVE-2022-40725: PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.
Key phrases: bypass the maximum PIN attempts permitted before the time
CVE-2022-40734: UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0.
Key phrases: read arbitrary files, directory traversal
CVE-2022-40735: The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequate subgroup constraints, and these short exponents can lead to less expensive calculations than for long exponents. This issue is different from CVE-2002-20001 because it is based on an observation about exponent size, rather than an observation about numbers that are not public keys. The specific situations in which calculation expense would constitute a server-side vulnerability depend on the protocol (e.g., TLS, SSH, or IKE) and the DHE implementation details. In general, there might be an availability concern because of server-side resource consumption from DHE modular-exponentiation calculations. Finally, it is possible for an attacker to exploit this vulnerability and CVE-2002-20001 together.
Key phrases: less expensive calculations than for long exponents, server-side, availability, resource consumption
CVE-2022-40736: An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in AP4_CttsAtom::Create in Core/Ap4CttsAtom.cpp.
Key phrases: memory consumption
CVE-2022-40737: An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4_StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4_ByteStream::Write and AP4_HdlrAtom::WriteFields.
Key phrases: buffer over-read, buffer over read
CVE-2022-40738: An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4_EsDescriptor::WriteFields and AP4_Expandable::Write.
Key phrases: null pointer dereference
CVE-2022-40739: Ragic report generation page has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript to perform XSS (Reflected Cross-Site Scripting) attack.
Key phrases: insufficient filtering
CVE-2022-40740: Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.
Key phrases: execute arbitrary system command, insufficient filtering, command injection, disrupt service
CVE-2022-40741: Mail SQR Experts specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service.
Key phrases: perform arbitrary system command, disrupt service
CVE-2022-40742: Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.
Key phrases: execute arbitrary PHP file, local file inclusion, service availability
CVE-2022-40743: Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can lead to cross site scripting and cache poisoning attacks.This issue affects Apache Traffic Server: 9.0.0 to 9.1.3. Users should upgrade to 9.1.4 or later versions.
Key phrases: improper input validation, cross-site scripting
CVE-2022-40746: IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system.  IBM X-Force ID:  236581.
Key phrases: execute arbitrary code, execute arbitrary code on the system, dll search order hijacking
CVE-2022-40747: "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."
Key phrases: xml external entity injection (xxe), consume memory resources, sensitive information
CVE-2022-40748: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236586.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2022-40750: IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  236588.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2022-40751: IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID:236601.
Key phrases: recover a credential previously saved for performing authenticated
CVE-2022-40752: IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687.
Key phrases: command injection
CVE-2022-40753: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236688.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2022-40754: In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.
Key phrases: open redirect
CVE-2022-40755: JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.
Key phrases: denial of service via a reachable assertion in
CVE-2022-40756: If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01.017), or Patch Update 5 for Zen 14 SP2 (v14.21.022), it can allow an attacker (with file read/write access) to remove specific security files in order to reset the master password and gain access to the database.
Key phrases: gain access, remove specific security files in order to reset, folder security, file read write access
CVE-2022-40757: A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACComputeFinal with an excessive size value of messageLen.
Key phrases: Denial of Service (DoS), trigger a Denial of Service (DoS), buffer access, denial of service (dos)
CVE-2022-40758: A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_CipherUpdate with an excessive size value of srcLen.
Key phrases: Denial of Service (DoS), trigger a Denial of Service (DoS), buffer access, denial of service (dos)
CVE-2022-40759: A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACCompareFinal with a NULL pointer for the parameter operation.
Key phrases: Denial of Service (DoS), trigger a Denial of Service (DoS), null pointer dereference issue, denial of service (dos)
CVE-2022-40760: A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACUpdate with an excessive size value of chunkSize.
Key phrases: Denial of Service (DoS), trigger a Denial of Service (DoS), buffer access, denial of service (dos)
CVE-2022-40761: The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc.
Key phrases: Denial of Service (DoS), trigger a Denial of Service (DoS), denial of service (dos), disturbed heap layout
CVE-2022-40762: A Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_Realloc with an excessive number for the parameter len.
Key phrases: Denial of Service (DoS), trigger a Denial of Service (DoS), memory allocation, denial of service (dos)
CVE-2022-40764: Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in the vendor.json ignore field, affecting snyk-go-plugin before 1.19.1. This affects, for example, the Snyk TeamCity plugin (which does not update automatically) before 20220930.142957.
Key phrases: allows arbitrary command execution, untrusted files, shell metacharacters, arbitrary commands
CVE-2022-40765: A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.
Key phrases: conduct a command-injection attack, command injection
CVE-2022-40766: Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , <?php' substring.
Key phrases: login-page SQL injection via a ', sql injection
CVE-2022-40768: drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.
Key phrases: obtain sensitive information, obtain sensitive information from kernel memory because stex_queuecommand_lck
CVE-2022-40769: profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022.
Key phrases: rng initializations, exploited in the wild
CVE-2022-40770: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.
Key phrases: authenticated command injection
CVE-2022-40771: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.
Key phrases: xml external entity, information disclosure
CVE-2022-40772: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.
Key phrases: bypass that allows users to access sensitive data, validation bypass, access sensitive data via the report module
CVE-2022-40773: Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. This allows users to obtain sensitive data during an exportMickeyList export of requests from the list view.
Key phrases: obtain sensitive data, obtain sensitive data during an exportMickeyList export of, privilege escalation
CVE-2022-40774: An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.
Key phrases: null pointer dereference
CVE-2022-40775: An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.
Key phrases: null pointer dereference
CVE-2022-40777: Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a /admin/temp/surveys/ URI. NOTE: this issue exists because of an incomplete fix for CVE-2018-19550.
Key phrases: allows arbitrary file upload, be accessible under a /admin/temp/
CVE-2022-40778: A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response.
Key phrases: execute arbitrary JavaScript or HTML, execute arbitrary JavaScript or HTML because of the, cross-site scripting (xss)
CVE-2022-40784: Unlimited strcpy on user input when setting a locale file leads to stack buffer overflow in mIPC camera firmware 5.3.1.2003161406.
Key phrases: stack buffer overflow
CVE-2022-40785: Unsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3.1.2003161406. This allows an attacker to gain remote code execution on cameras running the firmware when a victim logs into a specially crafted mobile app.
Key phrases: gain remote code execution, gain remote code execution on cameras running the, unsanitized input, shell injection
CVE-2022-40797: Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks .php, .php4, and .php5 files. (Visiting any .phar file invokes the PHP interpreter in some realistic web-server configurations.)
Key phrases: Remote Code Execution via a .phar upload, remote code execution
CVE-2022-40798: OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.
Key phrases: obtain the real email, sending the same request, incorrect access control, account takeover
CVE-2022-40799: Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.
Key phrases: execute OS level commands on the device, data integrity failure
CVE-2022-40805: The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package.
Key phrases: code-execution backdoor, code execution backdoor
CVE-2022-40806: The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
Key phrases: code-execution backdoor, code execution
CVE-2022-40807: The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
Key phrases: code-execution backdoor, code execution
CVE-2022-40808: The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
Key phrases: code-execution backdoor, code execution
CVE-2022-40809: The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
Key phrases: code-execution backdoor, code execution
CVE-2022-40810: The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
Key phrases: code-execution backdoor, code execution
CVE-2022-40811: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-40812: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-40816: Zammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that customer users are not able to see personal information of other users. This logic was not effective when used through a web socket connection, so that a logged-in attacker would be able to fetch personal data of other users by querying the Zammad API. This issue is fixed in , 5.2.2.
Key phrases: incorrect access control
CVE-2022-40817: Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents were still wrongly able to perform some operations on such tickets, like adding and removing links, tags. and related answers. This issue has been fixed in 5.2.2.
Key phrases: configure read-only access to tickets
CVE-2022-40824: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php or_where() function.
Key phrases: sql injection
CVE-2022-40825: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php where_in() function.
Key phrases: sql injection
CVE-2022-40826: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php or_having() function.
Key phrases: sql injection
CVE-2022-40827: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php where() function.
Key phrases: sql injection
CVE-2022-40828: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php or_where_not_in() function.
Key phrases: sql injection
CVE-2022-40829: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php or_like() function.
Key phrases: sql injection
CVE-2022-40830: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php where_not_in() function.
Key phrases: sql injection
CVE-2022-40831: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php like() function.
Key phrases: sql injection
CVE-2022-40832: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php having() function.
Key phrases: sql injection
CVE-2022-40833: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php or_where_in() function.
Key phrases: sql injection
CVE-2022-40834: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php or_not_like() function.
Key phrases: sql injection
CVE-2022-40835: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\\\\database\\\\DB_query_builder.php.
Key phrases: sql injection
CVE-2022-40839: A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.
Key phrases: exfiltrate database data, sql injection
CVE-2022-40840: ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.
Key phrases: cross site scripting (xss)
CVE-2022-40841: A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-40842: ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.
Key phrases: server-side request forgery (ssrf)
CVE-2022-40843: The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.
Key phrases: be bypassed, improper authorization, improper session management
CVE-2022-40844: In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body.
Key phrases: execute JavaScript code via the applications website filtering, stored cross site scripting (xss)
CVE-2022-40845: The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not explicitly authorized to have.
Key phrases: password exposure, improper authorization improper session management, sensitive information
CVE-2022-40846: In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) vulnerability exists allowing an attacker to execute JavaScript code via the applications stored hostname.
Key phrases: execute JavaScript code via the applications stored hostname, stored cross site scripting (xss)
CVE-2022-40847: In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter.
Key phrases: run arbitrary commands, run arbitrary commands on the server via the, command injection
CVE-2022-40849: ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID).
Key phrases: execute arbitrary JavaScript code, stored cross-site scripting (xss)
CVE-2022-40851: Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.
Key phrases: stack overflow
CVE-2022-40853: Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_set
Key phrases: stack overflow
CVE-2022-40854: Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
Key phrases: stack overflow
CVE-2022-40855: Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code Execution (RCE) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), stack overflow, denial of service (dos), remote code execution (rce)
CVE-2022-40860: Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetNetControlList
Key phrases: stack overflow
CVE-2022-40861: Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/
Key phrases: stack overflow
CVE-2022-40862: Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting
Key phrases: stack overflow