yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-31261: An XXE issue was discovered in Morpheus through 5.2.16 and 5.4.x through 5.4.4. A successful attack requires a SAML identity provider to be configured. In order to exploit the vulnerability, the attacker must know the unique SAML callback ID of the configured identity source. A remote attacker can send a request crafted with an XXE payload to invoke a malicious DTD hosted on a system that they control. This results in reading local files that the application has access to.
Key phrases: xxe issue, local files
CVE-2022-31262: An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\\\\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as SYSTEM.
Key phrases: local privilege escalation, hijack, code execution
CVE-2022-31263: app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions.
Key phrases: bypass of e-mail restrictions, a bypass of e-mail restrictions
CVE-2022-31264: Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.
Key phrases: addition integer overflow, invalid elf program headers, malformed ebpf program
CVE-2022-31265: The replay feature in the client in Wargaming World of Warships 0.11.4 allows remote attackers to execute code when a user launches a replay from an untrusted source.
Key phrases: execute code when a user launches a replay
CVE-2022-31266: In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.
Key phrases: take over accounts, verification
CVE-2022-31267: Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext 'attacker@example.com\\\\n\\\\trole = "#admin"' value.
Key phrases: privilege escalation via the Config User Service:
CVE-2022-31268: A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).
Key phrases: path traversal
CVE-2022-31269: Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. (This occurs in situations where the CVE-2019-7271 default credentials have been changed.)
Key phrases: open a building's doors, buildings doors, default credentials,
CVE-2022-3127: Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.
Key phrases: cross-site scripting (xss)
CVE-2022-31273: An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted session_id cookie.
Key phrases: perform a brute-force attack via a
CVE-2022-31277: Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request.
Key phrases: bypass the expected access restrictions, gain control, to bypass the expected access restrictions and gain, replay
CVE-2022-3128: The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2022-31282: Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175.
Key phrases: segmentation violation
CVE-2022-31285: An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h.
CVE-2022-31287: An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp.
Key phrases: allocation size request error
CVE-2022-3129: A vulnerability was found in codeprojects Online Driving School. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registration.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-207872.
Key phrases: unrestricted upload
CVE-2022-31290: A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-31291: An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.
Key phrases: cause a double free via crafted TCP packets
CVE-2022-31294: An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts.
Key phrases: arbitrarily create or update user accounts
CVE-2022-31295: An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.
Key phrases: arbitrarily delete posts
CVE-2022-31296: Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.
Key phrases: blind sql injection
CVE-2022-31298: A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting
CVE-2022-31299: Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.
Key phrases: reflected cross-site scripting (xss)
CVE-2022-3130: A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-207873 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2022-31300: A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting
CVE-2022-31301: Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.
Key phrases: stored cross-site scripting (xss)
CVE-2022-31302: maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.
Key phrases: stored cross-site scripting (xss)
CVE-2022-31303: maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.
Key phrases: stored cross-site scripting (xss)
CVE-2022-31306: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_convert_to_slow_array at src/njs_array.c.
Key phrases: segmentation violation
CVE-2022-31307: Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_string_offset at src/njs_string.c.
Key phrases: segmentation violation
CVE-2022-31308: A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution of the exec cmd function.
Key phrases: obtain sensitive router information, obtain sensitive router information via execution of the, live_mfg.shtml
CVE-2022-31309: A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via execution of the exec cmd function.
Key phrases: obtain sensitive router information, obtain sensitive router information via execution of the, live_check.shtml
CVE-2022-3131: The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users
Key phrases: sql injection
CVE-2022-31311: An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request.
Key phrases: execute arbitrary commands, execute arbitrary commands via a crafted POST request
CVE-2022-31313: api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
Key phrases: code execution backdoor
CVE-2022-3132: The Goolytics WordPress plugin before 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Key phrases: perform Cross-Site Scripting attacks even when, cross-site scripting, unfiltered_html capability
CVE-2022-31321: The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.
Key phrases: Denial of Service (DoS), perform directory enumeration or cause a Denial of, incorrect input validation, denial of service (dos)
CVE-2022-31322: Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables.
Key phrases: escalate privileges via overwriting files using SUID flagged, suid flagged executables
CVE-2022-31324: An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.
Key phrases: download arbitrary files, download arbitrary files via a crafted POST request, arbitrary file download
CVE-2022-31325: There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.
Key phrases: sql injection
CVE-2022-31327: Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=.
Key phrases: sql injection
CVE-2022-31328: Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=.
Key phrases: sql injection
CVE-2022-31329: Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php.
Key phrases: sql injection
CVE-2022-3133: OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0.
Key phrases: os command injection
CVE-2022-31335: Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=.
Key phrases: sql injection
CVE-2022-31336: Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php.
Key phrases: sql injection
CVE-2022-31337: Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=.
Key phrases: sql injection
CVE-2022-31338: Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.
Key phrases: sql injection
CVE-2022-31339: Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php.
Key phrases: sql injection
CVE-2022-3134: Use After Free in GitHub repository vim/vim prior to 9.0.0389.
Key phrases: use after free
CVE-2022-31340: Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
Key phrases: sql injection
CVE-2022-31342: Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete_img.
Key phrases: delete any file
CVE-2022-31343: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=.
Key phrases: sql injection
CVE-2022-31344: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking.
Key phrases: sql injection
CVE-2022-31345: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=.
Key phrases: sql injection
CVE-2022-31346: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service.
Key phrases: sql injection
CVE-2022-31347: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle.
Key phrases: sql injection
CVE-2022-31348: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=.
Key phrases: sql injection
CVE-2022-3135: The SEO Smart Links WordPress plugin through 3.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2022-31350: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=.
Key phrases: sql injection
CVE-2022-31351: Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage_price.php?id=.
Key phrases: sql injection
CVE-2022-31352: Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage_service.php?id=.
Key phrases: sql injection
CVE-2022-31353: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view_service.php?id=.
Key phrases: sql injection
CVE-2022-31354: Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service.
Key phrases: sql injection
CVE-2022-31355: Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.
Key phrases: sql injection
CVE-2022-31356: Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.
Key phrases: sql injection
CVE-2022-31357: Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.
Key phrases: sql injection
CVE-2022-31358: A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via non, reflected cross-site scripting (xss)
CVE-2022-3136: The Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2022-31361: Docebo Community Edition v4.0.5 and below was discovered to contain a SQL injection vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: sql injection
CVE-2022-31362: Docebo Community Edition v4.0.5 and below was discovered to contain an arbitrary file upload vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: arbitrary file upload
CVE-2022-31363: Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is pb_transport_handle_frag_.  In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered during mesh provisioning. Because there is no check for mismatched SegN and TotalLength in Transaction Start PDU.
Key phrases: execute arbitrary code, buffer overflow, arbitrary code (remote), out-of-bound write, out of bound write
CVE-2022-31364: Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is lower_transport_layer_on_seg.  In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered by sending a series of segmented packets with inconsistent SegN.
Key phrases: execute arbitrary code, buffer overflow, out-of-bound write, out of bound write
CVE-2022-31366: An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted UNL file, arbitrary file upload
CVE-2022-31367: Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.
Key phrases: hidden attributes
CVE-2022-3137: The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any authenticated user (such as subscriber) creating a task to perform Stored Cross-Site Scripting by attaching a malicious SVG file
Key phrases: perform Stored Cross-Site Scripting by attaching, stored cross-site scripting
CVE-2022-31372: Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted request to the resource handler.
Key phrases: path traversal
CVE-2022-31373: SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php.
Key phrases: cross-site scripting (xss)
CVE-2022-31374: An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted php file, arbitrary file upload
CVE-2022-3138: Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Key phrases: cross-site scripting (xss)
CVE-2022-31382: Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php.
Key phrases: sql injection
CVE-2022-31383: Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php.
Key phrases: sql injection
CVE-2022-31384: Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.
Key phrases: sql injection
CVE-2022-31386: A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.
Key phrases: make arbitrary requests, force the application to make arbitrary requests via, server-side request forgery (ssrf)
CVE-2022-3139: The Were Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting
CVE-2022-31390: Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php.
Key phrases: server-side request forgery (ssrf)
CVE-2022-31393: Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php.
Key phrases: server-side request forgery (ssrf)
CVE-2022-31394: Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.
Key phrases: perform HTTP2 attacks
CVE-2022-31395: Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-data.lua.
Key phrases: perform a directory traversal via a web request
CVE-2022-31398: A cross-site scripting (XSS) vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-3140: LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.1; 7.3 versions prior to 7.3.6.
Key phrases: arbitrary script execution
CVE-2022-31400: A cross-site scripting (XSS) vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-31402: ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.
Key phrases: cross-site scripting (xss)
CVE-2022-31403: ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php.
Key phrases: cross-site scripting (xss)
CVE-2022-31405: MV iDigital Clinic Enterprise (iDCE) 1.0 stores passwords in cleartext.
Key phrases: cleartext
CVE-2022-3141: The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected.
Key phrases: authenticated sql injection
CVE-2022-31414: D-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Key phrases: Denial of Service (DoS), buffer overflow, denial of service (dos)
CVE-2022-31415: Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php.
Key phrases: sql injection
CVE-2022-3142: The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. The attack can be executed by anyone who is permitted to view the forms statistics chart, by default administrators, however can be configured otherwise via the plugin settings.
Key phrases: sql injections
CVE-2022-3143: wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead. This flaw allows an attacker to access secure information or impersonate an authed user.
Key phrases: access secure information or impersonate an authed user, timing, unsafe comparator
CVE-2022-3144: The Wordfence Security  Firewall & Malware Scan plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 7.6.0 via a setting on the options page due to insufficient escaping on the stored value. This makes it possible for authenticated users, with administrative privileges, to inject malicious web scripts into the setting that executes whenever a user accesses a page displaying the affected setting on sites running a vulnerable version.
Key phrases: stored cross-site scripting
CVE-2022-31446: Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.
Key phrases: remote code execution (rce)
CVE-2022-31447: An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file.
Key phrases: access sensitive database information via a crafted SVG, xml external entity (xxe)
CVE-2022-3145: An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL.
Key phrases: redirect a user to an arbitrary URL, open redirect
CVE-2022-31454: Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this is disputed by the vendor because the cve-2022-31454-8e8555c31fd3 page does not describe why /books has a relationship to Yii 2.
Key phrases: cross-site scripting (xss)
CVE-2022-31455: * A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-31456: A cross-site scripting (XSS) vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name parameter.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2022-31457: RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/.
Key phrases: perform a directory traversal via a crafted request, rtx trap
CVE-2022-31458: RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning.
Key phrases: host header poisoning
CVE-2022-31459: Owl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10 value over Bluetooth.
Key phrases: retrieve the passcode hash via a certain c, c value
CVE-2022-3146: A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and discover the file. This issue leads to information disclosure of important configuration details from the OpenStack deployment.
Key phrases: use brute force to explore the relevant directory, information disclosure
CVE-2022-31460: Owl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded hoothoot credentials via a certain c 150 value.
Key phrases: activate Tethering Mode with hard-coded hoothoot, tethering mode, hard-coded hoothoot credentials, c value
CVE-2022-31461: Owl Labs Meeting Owl 5.2.0.15 allows attackers to deactivate the passcode protection mechanism via a certain c 11 message.
Key phrases: deactivate the passcode protection mechanism via a certain, c message
CVE-2022-31462: Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth broadcast data.
Key phrases: control the device via a backdoor password (, bluetooth broadcast data
CVE-2022-31463: Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used.
CVE-2022-31464: Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path.
Key phrases: escalate privileges via changing the service binary path, insecure permissions configuration
CVE-2022-31465: A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Designer VX.2.12 (All versions < VX.2.12 Update 5), Xpedition Designer VX.2.13 (All versions < VX.2.13 Update 1). The affected application assigns improper access rights to the service executable. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
Key phrases: inject arbitrary code, inject arbitrary code and escalate privileges
CVE-2022-31466: Time of Check - Time of Use (TOCTOU) vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when the action of quarantining or cleaning is performed, and using the time to replace the malicious file by a symlink.
Key phrases: achieve privilege escalation, time of check - time of use (toctou), deletion of system files
CVE-2022-31467: A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature of the DLLs it tries to load.
Key phrases: achieve privilege escalation, dll hijacking, arbitrary code
CVE-2022-31468: OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter.
Key phrases: XSS via an attachment or OX Drive content, xss
CVE-2022-31469: OX App Suite through 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /#!!&app=%2e./ URI.
Key phrases: XSS via a deep link, xss
CVE-2022-3147: Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service.
Key phrases: cause resource exhaustion on specific system configurations, in-memory sizes, server-side denial of service
CVE-2022-31470: An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.
Key phrases: run arbitrary Javascript code, run arbitrary Javascript code that, xss, mailbox content
CVE-2022-31471: untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.
Key phrases: xml external entity references
CVE-2022-31472: Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet.
Key phrases: Browse restriction bypass, obtain the data, obtain the data of Cabinet
CVE-2022-31473: In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Key phrases: bypass Appliance mode restrictions, cross a security boundary, directory traversal
CVE-2022-31474: Directory Traversal vulnerability in iThemes BackupBuddy plugin 8.5.8.0 - 8.7.4.1 versions.
Key phrases: directory traversal
CVE-2022-31475: Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress.
Key phrases: arbitrary file read
CVE-2022-31476: Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable denial of service via local access.
Key phrases: potentially enable denial of service via local access, improper access control
CVE-2022-31477: Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
Key phrases: potentially enable information disclosure via local access, improper initialization
CVE-2022-31478: The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function.
Key phrases: list all users via the search function, usertakeover plugin
CVE-2022-31479: An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable. The injected commands only get executed during start up or when unsafe calls regarding the hostname are used. This allows the attacker to gain remote access to the device and can make their persistence permanent by modifying the filesystem.
Key phrases: gain remote access, be executed during the core collection process, gain remote access to the device and can, shell commands, injected commands, unsafe calls, persistence permanent
CVE-2022-3148: Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.
Key phrases: cross-site scripting (xss)
CVE-2022-31480: An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The attacker needs to have a properly signed and encrypted binary, loading the firmware to the device ultimately triggers a reboot.
Key phrases: denial-of-service (dos), reboot
CVE-2022-31481: An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.302 for the LP series and 1.296 for the EP series. The overflowed data can allow the attacker to manipulate the normal code execution to that of their choosing. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.
Key phrases: manipulate the normal code execution to that of, overflow a buffer, overflowed data, unstable
CVE-2022-31482: An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The overflowed data leads to segmentation fault and ultimately a denial-of-service condition, causing the device to reboot. The impact of this vulnerability is that an unauthenticated attacker could leverage this flaw to cause the target device to become unresponsive. An attacker could automate this attack to achieve persistent DoS, effectively rendering the target controller useless.
Key phrases: overflow a buffer, segmentation fault, denial-of-service condition, unresponsive, persistent dos, useless, denial of service, reboot
CVE-2022-31483: An authenticated attacker can upload a file with a filename including .. and / to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.271. This allows a malicious actor to overwrite sensitive system files and install a startup service to gain remote access to the underlaying Linux operating system with root privileges.
Key phrases: gain remote access, overwrite sensitive system files and install a startup, root privilege
CVE-2022-31484: An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The impact of this vulnerability is that an unauthenticated attacker could restrict access to the web interface to legitimate users and potentially requiring them to use the default user dip switch procedure to gain access back.
Key phrases: gain access
CVE-2022-31485: An unauthenticated attacker can send a specially crafted packets to update the notes section of the home page of the web interface. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29.
CVE-2022-31486: An authenticated attacker can send a specially crafted route to the edit_route.cgi binary and have it execute shell commands. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.303 for the LP series and 1.297 for the EP series. An attacker with this level of access on the device can monitor all communications sent to and from this device, modify onboard relays, change configuration files, or cause the device to become unstable.
Key phrases: unstable
CVE-2022-31487: Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL injection.
Key phrases: Chart/TradingView/chart_content/master.php symbol, sql injection
CVE-2022-31488: Inout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency SQL injection.
Key phrases: index.php/coins/update_marketboxslider marketcurrency SQL injection, sql injection
CVE-2022-31489: Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL injection.
Key phrases: index.php/home/about inoutio_language cookie SQL injection, sql injection
CVE-2022-3149: The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors, which could allow attackers to made a logged in admin perform such actions via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping in some of the cursor options, it could also lead to Stored Cross-Site Scripting
Key phrases: made a logged in admin perform such actions, csrf, stored cross-site scripting
CVE-2022-31492: Cross Site scripting (XSS) vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroup_admin_add.php Username.
Key phrases: cross site scripting (xss)
CVE-2022-31493: LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php acl_id XSS.
Key phrases: gacl/admin/acl_admin.php acl_id XSS, acl_id xss
CVE-2022-31494: LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php action XSS.
Key phrases: gacl/admin/acl_admin.php action XSS, xss
CVE-2022-31495: LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
Key phrases: gacl/admin/acl_admin.php return_page XSS, return_page xss
CVE-2022-31496: LibreHealth EHR Base 2.0.0 allows incorrect interface/super/manage_site_files.php access.
Key phrases: incorrect interface/super/manage_site_files.php access, incorrect interface super manage_site_files.php access
CVE-2022-31497: LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.
Key phrases: interface/main/finder/finder_navigation.php patient, patient xss
CVE-2022-31498: LibreHealth EHR Base 2.0.0 allows interface/orders/patient_match_dialog.php key XSS.
Key phrases: interface/orders/patient_match_dialog.php key XSS, interface orders patient_match_dialog.php key xss
CVE-2022-31499: Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.
Key phrases: inject OS commands via ReaderNo, readerno
CVE-2022-3150: The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privileged users such as admin
Key phrases: sql injection
CVE-2022-31500: In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions.
Key phrases: filesystem permissions
CVE-2022-31501: The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31502: The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31503: The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31504: The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31505: The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31506: The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31507: The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31508: The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31509: The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-3151: The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.
Key phrases: made a logged in admin delete arbitrary cursors, csrf check
CVE-2022-31510: The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31511: The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31512: The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31513: The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31514: The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31515: The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31516: The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31517: The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31518: The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31519: The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-3152: Unverified Password Change in GitHub repository phpfusion/phpfusion prior to 9.10.20.
Key phrases: unverified password change
CVE-2022-31520: The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31521: The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31522: The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31523: The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31524: The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function
CVE-2022-31525: The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Key phrases: absolute path traversal because the Flask send_file function