yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-40403: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/feature_edit.php.
Key phrases: sql injection
CVE-2022-40404: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php.
Key phrases: sql injection
CVE-2022-40405: WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs.
Key phrases: sql injection
CVE-2022-40407: A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted Zip file, zip slip, file upload
CVE-2022-40408: FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Single Page module.
Key phrases: cross-site scripting (xss)
CVE-2022-4041: Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1.
Key phrases: cause privilege escalation, incorrect privilege assignment
CVE-2022-4042: The Paytium: Mollie payment forms & donations WordPress plugin before 4.3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2022-40424: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0
Key phrases: code-execution backdoor, code execution backdoor
CVE-2022-40425: The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-40426: The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-40427: The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0
Key phrases: code-execution backdoor, code execution
CVE-2022-40428: The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-40429: The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-4043: The WP Custom Admin Interface WordPress plugin before 7.29 unserialize user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
Key phrases: perform PHP Object Injection when a suitable gadget, php object injection
CVE-2022-40430: The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-40431: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-40432: The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0.
Key phrases: code-execution backdoor, code execution
CVE-2022-40433: An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service. Note: Vendor states that this to is Defense in Depth at most due to the nature of the issue and the special circumstances required (server must be running particular code locally, code compiled with an old, old version of javac, etc.).
Key phrases: cause a denial of service
CVE-2022-40434: Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page.
Key phrases: html injection
CVE-2022-40435: Employee Performance Evaluation System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via adding new entries under the Departments and Designations module.
Key phrases: cross-site scripting (xss)
CVE-2022-40438: Buffer overflow vulnerability in function AP4_MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
Key phrases: cause a denial of service via a crafted, buffer overflow
CVE-2022-40439: An memory leak issue was discovered in AP4_StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
Key phrases: cause a denial of service via a crafted, memory leak
CVE-2022-4044: A denial-of-service vulnerability in Mattermost allows an authenticated user to crash the server via multiple large autoresponder messages.
Key phrases: crash the server via multiple large autoresponder messages, denial-of-service, denial of service
CVE-2022-40440: mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function.
Key phrases: cross-site scripting (xss)
CVE-2022-40443: An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted GET request, absolute path traversal
CVE-2022-40444: ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.
Key phrases: full path disclosure
CVE-2022-40446: ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=.
Key phrases: sql injection
CVE-2022-40447: ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php.
Key phrases: sql injection
CVE-2022-4045: A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpointswhich could fetch a large amount of data.
Key phrases: crash the server via multiple requests to one, denial-of-service, large amount of data, denial of service
CVE-2022-4046: In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.
Key phrases: gain full access, gain full access of the device, improper restriction of operations, out of bounds memory
CVE-2022-40468: Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in process_request() function.
Key phrases: potential leak, uninitialized buffers
CVE-2022-40469: iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.
Key phrases: authenticated remote code execution (rce)
CVE-2022-4047: The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE
Key phrases: upload arbitrary files, upload arbitrary files such as PHP and lead, rce, file upload
CVE-2022-40470: Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature.
Key phrases: Cross Site Scripting via Add Blood Group Name, cross site scripting
CVE-2022-40471: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php
Key phrases: Upload arbitrary php webshell, Upload arbitrary php webshell via profile picture upload, remote code execution
CVE-2022-40472: ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload injected, csv injection
CVE-2022-40475: TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
Key phrases: command injection
CVE-2022-40476: A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service.
Key phrases: null pointer dereference issue, denial of service, crash, crash system
CVE-2022-4048: Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
Key phrases: access and manipulate code of the encrypted boot, inadequate encryption strength
CVE-2022-40480: Nordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attackers to cause a Denial of Service (DoS) via a crafted ConReq packet.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), denial of service (dos)
CVE-2022-40482: The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing. This is caused by the early return inside the hasValidCredentials method in the Illuminate\\\\Auth\\\\SessionGuard class when a user is found to not exist.
Key phrases: user enumeration, timeless timing, early return
CVE-2022-40483: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
Key phrases: sql injection
CVE-2022-40484: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
Key phrases: sql injection
CVE-2022-40485: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
Key phrases: sql injection
CVE-2022-40486: TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated attackers to execute arbitrary code via a crafted backup file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted backup file
CVE-2022-40487: ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via injection, cross-site scripting (xss), html injection
CVE-2022-40488: ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).
Key phrases: cross-site request forgery (csrf)
CVE-2022-40489: ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.
Key phrases: be injected into administrative users, cross site request forgery (csrf)
CVE-2022-4049: The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
Key phrases: sql injection, exploitable
CVE-2022-40494: NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.
Key phrases: authentication bypass
CVE-2022-40497: Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.
Key phrases: authenticated remote code execution (rce)
CVE-2022-4050: The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users
Key phrases: sql injection, exploitable
CVE-2022-40502: Transient DOS due to improper input validation in WLAN Host.
Key phrases: transient dos, improper input validation
CVE-2022-40503: Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
Key phrases: information disclosure, buffer over-read, buffer over read
CVE-2022-40504: Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
Key phrases: transient dos, reachable assertion
CVE-2022-40505: Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
Key phrases: information disclosure, buffer over-read, buffer over read
CVE-2022-40507: Memory corruption due to double free in Core while mapping HLOS address to the list.
Key phrases: memory corruption, double free
CVE-2022-40508: Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
Key phrases: transient dos, reachable assertion
CVE-2022-4051: A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument property_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-213844.
Key phrases: sql injection
CVE-2022-40510: Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
Key phrases: memory corruption
CVE-2022-40512: Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
Key phrases: transient dos, buffer over-read, buffer over read
CVE-2022-40513: Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.
Key phrases: transient dos, uncontrolled resource consumption, non qos state
CVE-2022-40514: Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
Key phrases: memory corruption
CVE-2022-40515: Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
Key phrases: memory corruption, double free
CVE-2022-40516: Memory corruption in Core due to stack-based buffer overflow.
Key phrases: memory corruption, stack-based buffer overflow, stack based buffer overflow
CVE-2022-40517: Memory corruption in core due to stack-based buffer overflow
Key phrases: memory corruption, stack-based buffer overflow, stack based buffer overflow
CVE-2022-40518: Information disclosure due to buffer overread in Core
Key phrases: information disclosure, buffer overread
CVE-2022-40519: Information disclosure due to buffer overread in Core
Key phrases: information disclosure, buffer overread
CVE-2022-4052: A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213845 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2022-40520: Memory corruption due to stack-based buffer overflow in Core
Key phrases: memory corruption, stack-based buffer overflow, stack based buffer overflow
CVE-2022-40521: Transient DOS due to improper authorization in Modem
Key phrases: transient dos, improper authorization
CVE-2022-40522: Memory corruption in Linux Networking due to double free while handling a hyp-assign.
Key phrases: memory corruption, double free
CVE-2022-40523: Information disclosure in Kernel due to indirect branch misprediction.
Key phrases: information disclosure, indirect branch misprediction
CVE-2022-40524: Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
Key phrases: memory corruption, buffer over-read, buffer over read
CVE-2022-40525: Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
Key phrases: information disclosure, unauthorized information leak, side channel analysis
CVE-2022-40527: Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.
Key phrases: transient dos, reachable assertion
CVE-2022-40529: Memory corruption due to improper access control in kernel while processing a mapping request from root process.
Key phrases: memory corruption, improper access control
CVE-2022-4053: A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213846 is the identifier assigned to this vulnerability.
Key phrases: cross-site scripting
CVE-2022-40530: Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
Key phrases: memory corruption, integer overflow, buffer overflow
CVE-2022-40531: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
Key phrases: memory corruption
CVE-2022-40532: Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
Key phrases: memory corruption, integer overflow, wraparound
CVE-2022-40533: Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
Key phrases: transient dos, pointer dereference
CVE-2022-40534: Memory corruption due to improper validation of array index in Audio.
Key phrases: memory corruption
CVE-2022-40535: Transient DOS due to buffer over-read in WLAN while sending a packet to device.
Key phrases: buffer over-read, buffer over read
CVE-2022-40536: Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
Key phrases: transient dos, improper authentication
CVE-2022-40537: Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
Key phrases: memory corruption
CVE-2022-40538: Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.
Key phrases: reachable assertion
CVE-2022-40539: Memory corruption in Automotive Android OS due to improper validation of array index.
Key phrases: memory corruption
CVE-2022-4054: An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible for a project maintainer to leak a webhook secret token by changing the webhook URL to an endpoint that allows them to capture request headers.
Key phrases: capture request headers, webhook secret token
CVE-2022-40540: Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.
Key phrases: memory corruption
CVE-2022-4055: When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.
CVE-2022-4057: The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.
Key phrases: guessable path
CVE-2022-4058: The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control.
Key phrases: stored xss issue
CVE-2022-4059: The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Key phrases: sql injection
CVE-2022-4060: The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it.
CVE-2022-40602: A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator.
Key phrases: access the device using an improper pre-
CVE-2022-40603: A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firmware versions 4.30 through 5.31, USG FLEX series firmware versions 4.50 through 5.31, and ATP series firmware versions 4.32 through 5.31, which could allow an attacker to trick a user into visiting a crafted URL with the XSS payload. Then, the attacker could gain access to some browser-based information if the malicious script is executed on the victims browser.
Key phrases: gain access, trick a user into visiting a crafted URL, cross-site scripting (xss), xss payload, browser-based information
CVE-2022-40604: In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Key phrases: for possible information extraction
CVE-2022-40605: MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606.
Key phrases: XSS in the Operations tab and/or Debrief plugin, xss
CVE-2022-40606: MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605.
Key phrases: XSS in the Operations tab and/or Debrief plugin, xss
CVE-2022-40607: IBM Spectrum Scale 5.1 could allow users with permissions to create pod, persistent volume and persistent volume claim to access files and directories outside of the volume, including on the host filesystem. IBM X-Force ID: 235740.
Key phrases: create pod
CVE-2022-40608: IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.
Key phrases: directory traversal
CVE-2022-40609: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system.  IBM X-Force ID:  236069.
Key phrases: execute arbitrary code, execute arbitrary code on the system, unsafe deserialization flaw
CVE-2022-4061: The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP.
Key phrases: upload arbitrary files, upload arbitrary files such as PHP, file upload
CVE-2022-40615: IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 236208.
Key phrases: view, sql injection
CVE-2022-40616: IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or perform tasks they should not have access to. IBM X-Force ID: 236311.
Key phrases: bypass authentication, obtain sensitive information, bypass authentication and obtain sensitive information or perform
CVE-2022-40617: strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
Key phrases: cause a denial of service in the revocation
CVE-2022-4062: A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission (Versions prior to V2.25)
Key phrases: cwe-285, unauthorized access
CVE-2022-40621: Because the WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 and earlier communicates over HTTP and not HTTPS, and because the hashing mechanism does not rely on a server-supplied key, it is possible for an attacker with sufficient network access to capture the hashed password of a logged on user and use it in a classic Pass-the-Hash style attack.
Key phrases: pass-the-hash style
CVE-2022-40622: The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 uses IP addresses to hold sessions and does not not use session tokens. Therefore, if an attacker changes their IP address to match the logged-in administrator's, or is behind the same NAT as the logged in administrator, session takeover is possible.
Key phrases: session takeover
CVE-2022-40623: The WAVLINK Quantum D4G (WN531G3) running firmware version M31G3.V5030.200325 does not utilize anti-CSRF tokens, which, when combined with other issues (such as CVE-2022-35518), can lead to remote, unauthenticated command execution.
Key phrases: command execution
CVE-2022-40624: pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.
Key phrases: execute arbitrary OS commands, execute arbitrary OS commands as root via the, arbitrary os command
CVE-2022-40626: An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account with predefined login, password and role in Zabbix Frontend.
CVE-2022-40628: This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper control of code generation in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary commands on the targeted device.
Key phrases: execute arbitrary commands, execute arbitrary commands on the targeted device
CVE-2022-40629: This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to view sensitive information on the targeted device.
Key phrases: view sensitive information on the targeted device
CVE-2022-4063: The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.
Key phrases: force the inclusion of malicious files & URLs
CVE-2022-40630: This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform session fixation on the targeted device.
Key phrases: perform session fixation on the targeted device
CVE-2022-40631: A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT (All versions < V5.5.0), SCALANCE X201-3P IRT PRO (All versions < V5.5.0), SCALANCE X202-2IRT (All versions < V5.5.0), SCALANCE X202-2P IRT (All versions < V5.5.0), SCALANCE X202-2P IRT PRO (All versions < V5.5.0), SCALANCE X204-2 (All versions < V5.2.5), SCALANCE X204-2FM (All versions < V5.2.5), SCALANCE X204-2LD (All versions < V5.2.5), SCALANCE X204-2LD TS (All versions < V5.2.5), SCALANCE X204-2TS (All versions < V5.2.5), SCALANCE X204IRT (All versions < V5.5.0), SCALANCE X204IRT PRO (All versions < V5.5.0), SCALANCE X206-1 (All versions < V5.2.5), SCALANCE X206-1LD (All versions < V5.2.5), SCALANCE X208 (All versions < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < V5.5.0), SCALANCE XF202-2P IRT (All versions < V5.5.0), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204-2 (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < V5.5.0), SCALANCE XF204IRT (All versions < V5.5.0), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5), SIPLUS NET SCALANCE X202-2P IRT (All versions < V5.5.0). There is a cross-site scripting vulnerability on the affected devices, that if used by a threat actor, it could result in session hijacking.
Key phrases: scalance irt, scalance irt pro, scalance pro
CVE-2022-40632: Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to topic deletion.
Key phrases: cross-site request forgery (csrf), topic deletion
CVE-2022-40633: A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks.
Key phrases: access cards
CVE-2022-40634: Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.
Key phrases: execute OS commands via FreeMarker SSTI, dynamically-managed code resources
CVE-2022-40635: Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.
Key phrases: Groovy Sandbox Bypass, execute OS commands via Groovy Sandbox Bypass, dynamically-managed code resources, groovy sandbox bypass
CVE-2022-40636: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17044.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40637: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17045.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40638: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17102.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40639: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17207.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-4064: A vulnerability was found in Dalli. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d. It is recommended to apply a patch to fix this issue. VDB-214026 is the identifier assigned to this vulnerability.
CVE-2022-40640: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a read before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17308.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40641: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17317.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40642: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17318.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40643: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17407.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40644: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17408.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40645: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17540.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40646: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17541.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40647: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17558.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40648: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write before the start of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17563.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40649: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17565.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-4065: A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML File Parser. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 7.5.1 and 7.7.1 is able to address this issue. The patch is named 9150736cd2c123a6a3b60e6193630859f9f0422b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-214027.
Key phrases: path traversal
CVE-2022-40650: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17838.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40651: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17844.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40652: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17846.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40653: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18349.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40654: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_T files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18351.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Ansys, execute code
CVE-2022-40655: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ND2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15071.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code
CVE-2022-40656: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ND2 files. Crafted data in a ND2 file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15072.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of NIKON, execute code