yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-29922: Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS600 product. This issue affects: Hitachi Energy MicroSCADA Pro SYS600 version 9.4 FP2 Hotfix 4 and earlier versions Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.0:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*
Key phrases: improper input validation, denial-of-service, denial of service
CVE-2022-29923: Cross-site Scripting (XSS) vulnerability in ThingsForRestaurants Quick Restaurant Reservations (WordPress plugin) allows Reflected XSS.This issue affects Quick Restaurant Reservations (WordPress plugin): from n/a through 1.4.1.
Key phrases: Reflected XSS.This issue affects Quick Restaurant Reservations (, cross-site scripting (xss), reflected xss
CVE-2022-29925: Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
Key phrases: execute arbitrary code, obtain information, obtain information and/or execute arbitrary code by having, uninitialized pointer
CVE-2022-29927: In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible
Key phrases: reflected xss
CVE-2022-29928: In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible
Key phrases: leak of secrets
CVE-2022-29929: In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible
Key phrases: xss
CVE-2022-2993: There is an error in the condition of the last if-statement in the function smp_check_keys. It was rejecting current keys if all requirements were unmet.
CVE-2022-29930: SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1.
Key phrases: implementation
CVE-2022-29931: The administration interface of the Raytion Custom Security Manager (Raytion CSM) in Version 7.2.0 allows reflected Cross-site Scripting (XSS).
Key phrases: reflected Cross-site Scripting (XSS), reflected cross-site scripting (xss)
CVE-2022-29932: The HTTP Server in PRIMEUR SPAZIO 2.5.1.954 (File Transfer) allows an unauthenticated attacker to obtain sensitive data (related to the content of transferred files) via a crafted HTTP request.
Key phrases: obtain sensitive data, obtain sensitive data (related to the content, file transfer
CVE-2022-29933: Craft CMS through 3.7.36 allows a remote unauthenticated attacker, who knows at least one valid username, to reset the account's password and take over the account by providing a crafted HTTP header to the application while using the password reset functionality. Specifically, the attacker must send X-Forwarded-Host to the /index.php?p=admin/actions/users/send-password-reset-email URI. NOTE: the vendor's position is that a customer can already work around this by adjusting the configuration (i.e., by not using the default configuration).
Key phrases: reset the account's password and take over
CVE-2022-29934: USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Oracle Corporation product.
Key phrases: achieve root access via pkexec
CVE-2022-29935: USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download. NOTE: this is not an Oracle Corporation product.
Key phrases: discover the quantum credentials via an agent-
CVE-2022-29936: USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization. NOTE: this is not an Oracle Corporation product.
Key phrases: achieve remote code execution because of /v2/
CVE-2022-29937: USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.
Key phrases: achieve agent root access because some common OS
CVE-2022-29938: In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\\\\billing\\\\new_payment.php via interface\\\\billing\\\\payment_master.inc.php leads to SQL injection.
Key phrases: sql injection
CVE-2022-29939: In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\\\\billing\\\\sl_eob_process.php leads to multiple cross-site scripting (XSS) vulnerabilities.
Key phrases: cross-site scripting (xss)
CVE-2022-29940: In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\\\\orders\\\\find_order_popup.php leads to multiple cross-site scripting (XSS) vulnerabilities.
Key phrases: cross-site scripting (xss)
CVE-2022-29942: Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
Key phrases: use the Service Registry 'Add' functionality
CVE-2022-29943: Talend Administration Center has a vulnerability that allows an authenticated user to use XML External Entity (XXE) processing to achieve read access as root on the remote filesystem. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
Key phrases: use XML External Entity (XXE) processing, xml external entity (xxe)
CVE-2022-29944: An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing intents does not redirect to a new path, even if a new intent that shares the path with higher priority is installed.
CVE-2022-29945: DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol.
Key phrases: unencrypted information
CVE-2022-29947: Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.
Key phrases: XSS via build logs because web/src, xss
CVE-2022-29948: Due to an insecure design, the Lepin EP-KP001 flash drive through KP001_V19 is vulnerable to an authentication bypass attack that enables an attacker to gain access to the stored encrypted data. Normally, the encrypted disk partition with this data is unlocked by entering the correct passcode (6 to 14 digits) via the keypad and pressing the Unlock button. This authentication is performed by an unknown microcontroller. By replacing this microcontroller on a target device with one from an attacker-controlled Lepin EP-KP001 whose passcode is known, it is possible to successfully unlock the target device and read the stored data in cleartext.
Key phrases: bypass attack that enables an attacker to gain access, authentication bypass
CVE-2022-2995: Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
Key phrases: sensitive information disclosure, data modification
CVE-2022-29950: Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the (1) rule name parameter to the Rules page or the (2) subrule name or (3) categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed
Key phrases: modify assumed-immutable elements via the (
CVE-2022-29951: JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on ports 1024-65534 on either TCP or UDP) for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing configuration settings. This protocol does not have any authentication features, allowing any attacker capable of communicating with the port in question to invoke (a subset of) desired functionality.
Key phrases: invoke (a subset of) desired functionality
CVE-2022-29952: Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration (BNMC) software. These protocols provide configuration management and historical data related functionality. Neither protocol has any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality.
Key phrases: invoke (a subset of) desired functionality
CVE-2022-29953: The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality.
Key phrases: hardcoded credentials
CVE-2022-29957: The Emerson DeltaV Distributed Control System (DCS) through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols include Firmware upgrade (18508/TCP, 18518/TCP); Plug-and-Play (18510/UDP); Hawk services (18507/UDP); Management (18519/TCP); Cold restart (18512/UDP); SIS communications (12345/TCP); and Wireless Gateway Protocol (18515/UDP). None of these protocols have any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality.
Key phrases: invoke (a subset of) desired functionality
CVE-2022-29958: JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the unauthenticated CMPLink/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. Control logic is downloaded to the PLC on a block-by-block basis with a given memory address and a blob of machine code. The logic that is downloaded to the PLC is not cryptographically authenticated, allowing an attacker to execute arbitrary machine code on the PLC's CPU module in the context of the runtime. In the case of the PC10G-CPU, and likely for other CPU modules of the TOYOPUC family, a processor without MPU or MMU is used and this no memory protection or privilege-separation capabilities are available, giving an attacker full control over the CPU.
Key phrases: execute arbitrary machine code, execute arbitrary machine code on the PLC's, integrity
CVE-2022-29959: Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users are stored insecurely in the SecUsers.ini file by using a simple string transformation rather than a cryptographic mechanism.
CVE-2022-2996: A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks.
Key phrases: man-in-the-middle (mitm)
CVE-2022-29960: Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. DES with hardcoded cryptographic keys is used for protection of certain system credentials, engineering files, and sensitive utilities.
Key phrases: weak cryptography, hardcoded
CVE-2022-29962: The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350.
Key phrases: hardcoded credentials
CVE-2022-29963: The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350.
Key phrases: root shell, hardcoded credentials
CVE-2022-29964: The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC SSH provides access to a shell as root, DeltaV, or backup via hardcoded credentials. NOTE: this is different from CVE-2014-2350.
Key phrases: hardcoded credentials
CVE-2022-29965: The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on M-series and SIS (CSLS/LSNB/LSNG) nodes is controlled by means of utility passwords. These passwords are generated using a deterministic, insecure algorithm using a single seed value composed of a day/hour/minute timestamp with less than 16 bits of entropy. The seed value is fed through a lookup table and a series of permutation operations resulting in three different four-character passwords corresponding to different privilege levels. An attacker can easily reconstruct these passwords and thus gain access to privileged maintenance operations. NOTE: this is different from CVE-2014-2350.
Key phrases: gain access
CVE-2022-29967: static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal.
Key phrases: directory traversal
CVE-2022-29968: An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.
CVE-2022-29969: The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true).
Key phrases: XSS via an rss element (if the, xss
CVE-2022-2997: Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.
Key phrases: session fixation
CVE-2022-29970: Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
CVE-2022-29971: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code.
Key phrases: execute arbitrary code, argument injection
CVE-2022-29972: An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code.
Key phrases: execute arbitrary code, argument injection
CVE-2022-29973: relan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in the filesystem) in certain situations involving offsets beyond ValidDataLength.
Key phrases: obtain sensitive information, obtain sensitive information (data from deleted files, offsets beyond validdatalength
CVE-2022-29975: An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .
Key phrases: authenticated reflected cross-site scripting, cc parameter
CVE-2022-29976: An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .
Key phrases: authenticated reflected cross-site scripting, bcc parameter
CVE-2022-29977: There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
Key phrases: assertion failure error, denial-of-service, denial of service
CVE-2022-29978: There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file.
Key phrases: floating point exception error, denial-of-service, denial of service
CVE-2022-29979: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.
Key phrases: sql injection
CVE-2022-2998: Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted HTML page.
Key phrases: use after free, heap corruption, convince
CVE-2022-29980: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.
Key phrases: sql injection
CVE-2022-29981: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.
Key phrases: sql injection
CVE-2022-29982: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.
Key phrases: sql injection
CVE-2022-29983: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.
Key phrases: sql injection
CVE-2022-29984: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.
Key phrases: sql injection
CVE-2022-29985: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \\\\scbs\\\\classes\\\\Master.php?f=delete_category.
Key phrases: sql injection
CVE-2022-29986: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \\\\scbs\\\\classes\\\\Master.php?f=delete_facility.
Key phrases: sql injection
CVE-2022-29987: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.
Key phrases: sql injection
CVE-2022-29988: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \\\\scbs\\\\classes\\\\Master.php?f=delete.
Key phrases: sql injection
CVE-2022-29989: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \\\\scbs\\\\classes\\\\Master.php?f=delete_booking.
Key phrases: sql injection
CVE-2022-29990: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=.
Key phrases: sql injection
CVE-2022-29992: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=.
Key phrases: sql injection
CVE-2022-29993: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=.
Key phrases: sql injection
CVE-2022-29994: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=.
Key phrases: sql injection
CVE-2022-29995: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.
Key phrases: sql injection
CVE-2022-29998: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=.
Key phrases: sql injection
CVE-2022-29999: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?client_id=.
Key phrases: sql injection
CVE-2022-3000: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Key phrases: cross-site scripting (xss)
CVE-2022-30000: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?recipt_no=.
Key phrases: sql injection
CVE-2022-30001: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agent_id=.
Key phrases: sql injection
CVE-2022-30002: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=.
Key phrases: sql injection
CVE-2022-30003: Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.
Key phrases: register as a Seller then create new products, cross site scripting (xss)
CVE-2022-30004: Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection..
Key phrases: dump the SQL database via time-based, unauthenticated blind sql injection, time-based sql injection
CVE-2022-30007: GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server.
Key phrases: file upload, control the server
CVE-2022-3001: This vulnerability exists in Milesight Video Management Systems (VMS), all firmware versions prior to 40.7.0.79-r1, due to improper input handling at cameras web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted network camera. Successful exploitation of this vulnerability could allow the attacker to cause a Denial of Service condition on the targeted device.
Key phrases: cause a Denial of Service condition on the, denial of service condition
CVE-2022-30011: In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability.
Key phrases: sql injection
CVE-2022-30012: In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.
Key phrases: sql injection
CVE-2022-30013: A stored cross-site scripting (XSS) vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file.
Key phrases: execute arbitrary web scripts, execute arbitrary web scripts via a JavaScript embedded, stored cross-site scripting (xss)
CVE-2022-30014: Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account.
Key phrases: takeover admin/moderater account, cross site request forgery (csrf)
CVE-2022-30015: In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/all_users.php like Full Username, etc .This causes stored xss.
Key phrases: cross site scripting payload, stored xss
CVE-2022-30016: Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info.
Key phrases: incorrect access control
CVE-2022-30017: Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing.
Key phrases: stored xss, admin account takeover, cookie stealing
CVE-2022-30018: Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access to recordings/recording locations.
Key phrases: gain admin access, gain access, insufficiently protected credentials, recoverable format
CVE-2022-3002: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Key phrases: cross-site scripting (xss)
CVE-2022-30023: Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
Key phrases: command injection
CVE-2022-30024: A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.
Key phrases: execute arbitrary code, execute arbitrary code via a GET request to, buffer overflow
CVE-2022-30025: SQL injection in "/Framewrk/Home.jsp" file (POST method) in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter.
Key phrases: sql injection
CVE-2022-30028: Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
Key phrases: change an account password via reusing a password, password reset token
CVE-2022-30033: Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.
Key phrases: buffer overflow
CVE-2022-30034: Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes.
Key phrases: invoke arbitrary Celery RPC, authentication bypass, oauth authentication bypass, deny service, shutting down celery task nodes
CVE-2022-30036: MA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product was designed for isolated networks. Also, the successor product, grandMA3, is not affected by this vulnerability.
CVE-2022-30037: XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.
Key phrases: execute arbitrary php code, php file write, php file inclusion, executing arbitrary php code
CVE-2022-3004: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Key phrases: cross-site scripting (xss)
CVE-2022-30040: Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.
Key phrases: buffer overflow, stack buffer overflow, router denial of service
CVE-2022-30045: An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap out-of-bounds read.
Key phrases: heap out-of-bounds read, out of bounds read
CVE-2022-30047: Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.
Key phrases: sql injection
CVE-2022-30048: Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.
Key phrases: sql injection
CVE-2022-30049: A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.
Key phrases: obtain the real IP address and scan Intranet information, server-side request forgery (ssrf)
CVE-2022-3005: Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
Key phrases: cross-site scripting (xss)
CVE-2022-30050: Gnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting (XSS) via bbs/member_confirm.php.
Key phrases: cross site scripting (xss)
CVE-2022-30052: In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks.
Key phrases: password parameter, sql injection
CVE-2022-30053: In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.
Key phrases: id parameter, sql injection
CVE-2022-30054: In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks.
Key phrases: code parameter, sql injection
CVE-2022-30055: Prime95 30.7 build 9 suffers from a Buffer Overflow vulnerability that could lead to Remote Code Execution.
Key phrases: buffer overflow, remote code execution
CVE-2022-30057: Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.
Key phrases: stored cross-site scripting (xss)
CVE-2022-30058: Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \\\\backend\\\\controllers\\\\DbController.php.
Key phrases: arbitrary file download
CVE-2022-30059: Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \\\\backend\\\\controllers\\\\DbController.php.
Key phrases: arbitrary file delete
CVE-2022-30060: ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php
Key phrases: arbitrary file write
CVE-2022-30061: ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.
Key phrases: directory traversal, parameter tp
CVE-2022-30062: ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php
Key phrases: arbitrary file read
CVE-2022-30063: ftcms <=2.1 was discovered to be vulnerable to code execution attacks .
Key phrases: code execution
CVE-2022-30065: A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
Key phrases: use-after-free, denial of service, code execution, use after free
CVE-2022-30067: GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.
Key phrases: buffer overflow, program crash
CVE-2022-3007: The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update (DFU) which is used for performing Over-The-Air (OTA) firmware updates on the Bluetooth Low Energy (BLE) devices. An unauthenticated attacker could exploit this vulnerability by setting arbitrary values to handle on the vulnerable device over Bluetooth.Successful exploitation of this vulnerability could allow the attacker to perform firmware update, device reboot or data manipulation on the target device.
Key phrases: setting arbitrary values, perform firmware update, data manipulation, reboot
CVE-2022-30072: WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \\\\admin\\\\pages\\\\sections_save.php namesection2 parameters.
Key phrases: cross site scripting (xss)
CVE-2022-30073: WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.
Key phrases: cross site scripting (xss)
CVE-2022-30075: In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.
Key phrases: remote code execution, improper validation
CVE-2022-30076: ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.
Key phrases: discover users' full names via a brute, brute force, rate limiting
CVE-2022-30078: NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameters.
Key phrases: execute arbitrary command, execute arbitrary command via shell metacharacters in the, arbitrary commands
CVE-2022-30079: Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.
Key phrases: modify values in the vulnerable parameter, command injection
CVE-2022-3008: The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input that would result in a path expansion. We recommend upgrading to 2.6.0 or past commit 52ff00a38447f06a17eab1caa2cf0730a119c751
Key phrases: 2.6.0 or past commit 52ff00a38447f06a17eab1caa2cf0730a119c751, command injection
CVE-2022-30083: EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code (remote).
Key phrases: code injection
CVE-2022-3010: The Priva TopControl Suite containspredictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.
CVE-2022-30105: In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the [form name] form; [list vulnerable parameters], are not properly sanitized after being submitted to the web interface in a POST request. With specially crafted parameters, it is possible to inject a an OS command which will be executed with root privileges, as the web interface, and all processes on the device, run as root.
Key phrases: remote command injection, root privilege
CVE-2022-30110: The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users' browser.
Key phrases: cross site scripting
CVE-2022-30111: Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.
Key phrases: unlock the mechanism via replay attacks, insecure algorithm
CVE-2022-30113: Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection.
Key phrases: sql injection
CVE-2022-30114: A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS.
Key phrases: reboot the device through a crafted HTTP request, heap-based buffer overflow, dos, heap based buffer overflow
CVE-2022-30115: Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
Key phrases: insecure clear-text http step
CVE-2022-30117: Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure Concrete doesnt allow traversal and by changing isFullChunkFilePresent to have an early false return when input doesn't match expectations.Concrete CMS Security team ranked this 5.8 with CVSS v3.1 vector AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. Credit to Siebene for reporting.
Key phrases: ensure Concrete doesnt allow traversal and by, have an early false return when input does, arbitrary file delete exploit
CVE-2022-30118: Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for reporting.
Key phrases: an automatic input escape mechanism, xss
CVE-2022-30119: XSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for reporting.
Key phrases: xss
CVE-2022-3012: A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207422 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2022-30120: XSS in /dashboard/blocks/stacks/view_details/ - old browsers only. When using an older browser with built-in XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 to allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 3.1with CVSS v3.1 Vector AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N. Sanitation has been added where built urls are output. Credit to Credit to Bogdan Tiron from FORTBRIDGE (https://www.fortbridge.co.uk/ ) for reporting
Key phrases: an automatic input escape mechanism, xss
CVE-2022-30121: The LANDesk(R) Management Agent service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system.
Key phrases: get escalated admin privileges on their system, security bug
CVE-2022-30122: A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.
Key phrases: denial of service
CVE-2022-30123: A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
Key phrases: is a possible shell escape in the Lint, sequence injection
CVE-2022-30124: An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication (PIN code).
Key phrases: bypass local authentication, improper authentication
CVE-2022-30126: In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0
Key phrases: denial of service
CVE-2022-30127: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-30128: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-30129: Visual Studio Code Remote Code Execution Vulnerability
Key phrases: visual studio code remote code execution
CVE-2022-3013: A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-207423.
Key phrases: sql injection
CVE-2022-30130: .NET Framework Denial of Service Vulnerability
Key phrases: .net framework denial of service
CVE-2022-30131: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Key phrases: windows container isolation fs filter driver elevation of privilege
CVE-2022-30132: Windows Container Manager Service Elevation of Privilege Vulnerability
Key phrases: service elevation of privilege
CVE-2022-30133: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30134: Microsoft Exchange Server Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-30135: Windows Media Center Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-30136: Windows Network File System Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30137: <p><strong>Executive Summary</strong></p><p>An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers.  Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container.  All Service Fabric and Docker versions are impacted.</p>
Key phrases: gain remote code execution, elevation of privilege (eop)
CVE-2022-30138: Windows Print Spooler Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-30139: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-3014: A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument student_add leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-207424.
Key phrases: cross site scripting
CVE-2022-30140: Windows iSCSI Discovery Service Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30141: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30142: Windows File History Remote Code Execution Vulnerability
Key phrases: windows file history remote code execution
CVE-2022-30143: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30144: Windows Bluetooth Service Remote Code Execution Vulnerability
Key phrases: windows bluetooth service remote code execution
CVE-2022-30145: Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30146: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30147: Windows Installer Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-30148: Windows Desired State Configuration (DSC) Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-30149: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-3015: A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue affects some unknown processing of the file admin/?page=reports. The manipulation of the argument date leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-207425 was assigned to this vulnerability.
Key phrases: cross site scripting
CVE-2022-30150: Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-30151: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Key phrases: winsock elevation of privilege
CVE-2022-30152: Windows Network Address Translation (NAT) Denial of Service Vulnerability
Key phrases: windows network address translation (nat), denial of service
CVE-2022-30153: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30154: Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-30155: Windows Kernel Denial of Service Vulnerability
Key phrases: denial of service
CVE-2022-30157: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30158: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30159: Microsoft Office Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30171, CVE-2022-30172.
Key phrases: information disclosure
CVE-2022-3016: Use After Free in GitHub repository vim/vim prior to 9.0.0286.
Key phrases: use after free
CVE-2022-30160: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Key phrases: windows advanced local procedure call (alpc) elevation of privilege
CVE-2022-30161: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30162: Windows Kernel Information Disclosure Vulnerability
Key phrases: windows kernel information disclosure
CVE-2022-30163: Windows Hyper-V Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-30164: Kerberos AppContainer Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, kerberos appcontainer security feature bypass
CVE-2022-30165: Windows Kerberos Elevation of Privilege Vulnerability
Key phrases: windows kerberos elevation of privilege
CVE-2022-30166: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Key phrases: local security authority subsystem service elevation of privilege
CVE-2022-30167: AV1 Video Extension Remote Code Execution Vulnerability
Key phrases: video extension remote code execution
CVE-2022-30168: Microsoft Photos App Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-3017: Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38.
Key phrases: cross-site request forgery (csrf)
CVE-2022-30170: Windows Credential Roaming Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-30171: Microsoft Office Information Disclosure Vulnerability
Key phrases: microsoft office information disclosure
CVE-2022-30172: Microsoft Office Information Disclosure Vulnerability
Key phrases: microsoft office information disclosure