yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-24508: Win32 File Enumeration Remote Code Execution Vulnerability
Key phrases: file enumeration, remote code execution
CVE-2022-24509: Microsoft Office Visio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24510: Microsoft Office Visio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24511: Microsoft Office Word Tampering Vulnerability
Key phrases: word tampering
CVE-2022-24512: .NET and Visual Studio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24513: Visual Studio Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24515: Azure Site Recovery Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24516: Microsoft Exchange Server Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24517: Azure Site Recovery Remote Code Execution Vulnerability
Key phrases: azure site recovery remote code execution
CVE-2022-24518: Azure Site Recovery Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24519: Azure Site Recovery Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24520: Azure Site Recovery Remote Code Execution Vulnerability
Key phrases: azure site recovery remote code execution
CVE-2022-24521: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Key phrases: windows common log file system driver elevation of privilege
CVE-2022-24522: Skype Extension for Chrome Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-24523: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Key phrases: spoofing
CVE-2022-24525: Windows Update Stack Elevation of Privilege Vulnerability
Key phrases: windows update stack elevation of privilege
CVE-2022-24526: Visual Studio Code Spoofing Vulnerability
Key phrases: visual studio code spoofing
CVE-2022-24527: Microsoft Endpoint Configuration Manager Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24528: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-2453: Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV.
Key phrases: use after free
CVE-2022-24530: Windows Installer Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24532: HEVC Video Extensions Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24533: Remote Desktop Protocol Remote Code Execution Vulnerability
Key phrases: remote desktop protocol remote code execution
CVE-2022-24534: Win32 Stream Enumeration Remote Code Execution Vulnerability
Key phrases: stream enumeration, remote code execution
CVE-2022-24536: Windows DNS Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24537: Windows Hyper-V Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24538: Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
Key phrases: windows cluster shared volume (csv), denial of service
CVE-2022-24539: Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2022-2454: Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV.
Key phrases: integer overflow, wraparound
CVE-2022-24540: Windows ALPC Elevation of Privilege Vulnerability
Key phrases: windows alpc elevation of privilege
CVE-2022-24541: Windows Server Service Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24542: Windows Win32k Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24543: Windows Upgrade Assistant Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24544: Windows Kerberos Elevation of Privilege Vulnerability
Key phrases: windows kerberos elevation of privilege
CVE-2022-24545: Windows Kerberos Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2022-24546: Windows DWM Core Library Elevation of Privilege Vulnerability
Key phrases: windows dwm core library elevation of privilege
CVE-2022-24547: Windows Digital Media Receiver Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-24548: Microsoft Defender Denial of Service Vulnerability
Key phrases: denial of service
CVE-2022-24549: Windows AppX Package Manager Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2022-2455: A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2 allowed an authenticated and authorized user to exhaust server resources by importing a malicious project.
Key phrases: business logic issue, exhaust server resources
CVE-2022-24550: Windows Telephony Server Elevation of Privilege Vulnerability
Key phrases: windows telephony server elevation of privilege
CVE-2022-24551: A flaw was found in StarWind Stack. The endpoint for setting a new password doesnt check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user This affects StarWind SAN and NAS v0.2 build 1633.
CVE-2022-24552: A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesnt check input parameters. Some of them go directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the command that will be executed with root privileges. This affects StarWind SAN and NAS v0.2 build 1633.
Key phrases: inject arbitrary data, root privilege
CVE-2022-24553: An issue was found in Zfaka <= 1.4.5. The verification of the background file upload function check is not strict, resulting in remote command execution.
Key phrases: remote command execution, file upload
CVE-2022-2456: An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for malicious group or project maintainers to change their corresponding group or project visibility by crafting a malicious POST request.
Key phrases: malicious post request
CVE-2022-24562: In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which can result in data theft and remote code execution.
Key phrases: gain arbitrary read, gain arbitrary read/write access, arbitrary read write access, data theft, remote code execution
CVE-2022-24563: In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.
Key phrases: cross-site scripting (xss)
CVE-2022-24564: Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.
Key phrases: cross site scripting (xss), html injection
CVE-2022-24565: Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications.
Key phrases: cross site scripting (xss)
CVE-2022-24566: In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting (XSS).
Key phrases: cross site scripting (xss)
CVE-2022-24568: Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.
Key phrases: server-side request forgery (ssrf)
CVE-2022-2457: A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration Console as the application does not limit the number of unsuccessful login attempts.
Key phrases: brute force
CVE-2022-24571: Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access.
Key phrases: sql injection, sql login injection, admin access
CVE-2022-24572: Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.
Key phrases: cross site scripting (xss)
CVE-2022-24573: A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to get admin access by injecting a malicious script in the User-Agent field.
Key phrases: get admin access by injecting a malicious script, stored cross-site scripting (xss)
CVE-2022-24574: GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra ().
Key phrases: null pointer dereference
CVE-2022-24575: GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2022-24576: GPAC 1.0.1 is affected by Use After Free through MP4Box.
Key phrases: use after free
CVE-2022-24577: GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.)
Key phrases: null pointer dereference
CVE-2022-24578: GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2022-2458: XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. Here, XML external entity injection lead to External Service interaction & Internal file read in Business Central and also Kie-Server APIs.
Key phrases: interfere with an application's processing of XML, xml external entity injection(xxe), file read
CVE-2022-24581: ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password hash of the user executing the ACEweb Online software.
Key phrases: disclose the username and password hash of the, unauthenticated smb hash capture
CVE-2022-24582: Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network.
Key phrases: xss-phpsessid-hijacking, xss-stored
CVE-2022-24584: Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server. The Yubico OTP supposedly creates hardware bound second factor credentials. When a user reprograms the OTP functionality by "writing" it on a token using the Yubico Personalization Tool, they can then upload the new configuration to Yubicos OTP validation servers. NOTE: the vendor disputes this because there is no way for a YubiKey device to prevent a user from deciding that a secret value, which is imported into the device, should also be stored elsewhere
Key phrases: incorrect access control
CVE-2022-24585: A stored cross-site scripting (XSS) vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, stored cross-site scripting (xss)
CVE-2022-24586: A stored cross-site scripting (XSS) vulnerability in the component /core/admin/categories.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content and thumbnail parameters.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, stored cross-site scripting (xss)
CVE-2022-24587: A stored cross-site scripting (XSS) vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML.
Key phrases: execute arbitrary web scripts or HTML, stored cross-site scripting (xss)
CVE-2022-24588: Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.
Key phrases: cross-site scripting (xss)
CVE-2022-24589: Burden v3.0 was discovered to contain a stored cross-site scripting (XSS) in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, stored cross-site scripting (xss)
CVE-2022-2459: An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for email invited members to join a project even after the Group Owner has enabled the setting to prevent members from being added to projects in a group, if the invite was sent before the setting was enabled.
CVE-2022-24590: A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML.
Key phrases: execute arbitrary web scripts or HTML, stored cross-site scripting (xss)
CVE-2022-24594: In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.
Key phrases: x-forwarded-for
CVE-2022-24595: Automotive Grade Linux Kooky Koi 11.0.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4, and 11.0.5 is affected by Incorrect Access Control in usr/bin/afb-daemon. To exploit the vulnerability, an attacker should send a well-crafted HTTP (or WebSocket) request to the socket listened by the afb-daemon process. No credentials nor user interactions are required.
Key phrases: incorrect access control
CVE-2022-24599: In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.
Key phrases: leak sensitive information via a crafted file, memory leak
CVE-2022-2460: The WPDating WordPress plugin before 7.4.0 does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injection vulnerabilities exploitable by unauthenticated users
Key phrases: sql injection
CVE-2022-24600: Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements.
Key phrases: sql injection
CVE-2022-24601: Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information through SQL injection statements.
Key phrases: obtain sensitive information, sql injection
CVE-2022-24602: Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.
Key phrases: sql injection
CVE-2022-24603: Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.
Key phrases: sql injection
CVE-2022-24604: Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.
Key phrases: sql injection
CVE-2022-24605: Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.
Key phrases: sql injection
CVE-2022-24606: Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.
Key phrases: sql injection
CVE-2022-24607: Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.
Key phrases: sql injection
CVE-2022-24608: Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.
Key phrases: cross site scripting (xss)
CVE-2022-24609: Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.
Key phrases: access control, incorrect access control
CVE-2022-2461: The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and including, 1.0.8.1. This is due to insufficient permissions checking on the 'tp_translation' AJAX action and default settings which makes it possible for unauthenticated attackers to influence the data shown on the site.
Key phrases: unauthorized setting changes, insufficient permissions checking, influence, data shown on the site
CVE-2022-24610: Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera.
CVE-2022-24611: Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs.
Key phrases: Denial of Service (DoS), block S0/S2 protected Z-Wave, denial of service (dos)
CVE-2022-24612: An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS.
Key phrases: xss, stored xss
CVE-2022-24613: metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library.
Key phrases: uncaught exceptions, application crash, denial of service
CVE-2022-24614: When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library.
Key phrases: out-of-memory error, denial of service
CVE-2022-24615: zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library.
Key phrases: uncaught exceptions, application crash, denial of service
CVE-2022-24618: Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\\\\Windows\\\\Installer.
Key phrases: elevate privileges to SYSTEM via the "Browse, insecure permissions
CVE-2022-2462: The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and including, 1.0.8.1. This is due to insufficient permissions checking on the 'tp_history' AJAX action and insufficient restriction on the data returned in the response. This makes it possible for unauthenticated users to exfiltrate usernames of individuals who have translated text.
Key phrases: sensitive information disclosure
CVE-2022-24620: Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access.
Key phrases: stored cross-site scripting (xss), privilege escalation
CVE-2022-24627: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the process_login.php login form.
Key phrases: sql injection
CVE-2022-24628: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhoneFirmwareEdit.php.
Key phrases: sql injection
CVE-2022-24629: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory traversal in the dir parameter of the file upload functionality of BrowseFiles.php. An attacker can upload a .php file to WebAdmin/admin/AudioCodes_files/ajax/.
Key phrases: remote code execution, directory traversal, file upload
CVE-2022-2463: Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the software is running at the SYSTEM level, then the attacker will gain admin level privileges. User interaction is required for this exploit to be successful.
Key phrases: gain the privileges, gain admin level privileges, gain the privileges of the ISaGRAF Workbench software, path traversal, gain privileges
CVE-2022-24630: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed.
Key phrases: a ?cmd=ssh POST request with
CVE-2022-24631: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is stored XSS via the ajaxTenants.php desc parameter.
Key phrases: xss
CVE-2022-24632: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during file download via the BrowseFiles.php view parameter.
Key phrases: directory traversal
CVE-2022-24633: All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/<username>". A malicious actor could identify the existence of users by requesting share information on specified share paths.
Key phrases: user enumeration
CVE-2022-24637: Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intended "<?php sequence) aren't handled by the PHP interpreter.
Key phrases: obtain sensitive user information, gain admin privileges, cache hashes
CVE-2022-2464: Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for this exploit to be successful.
Key phrases: traverse the file system when opened by ISaGRAF, path traversal
CVE-2022-24643: A stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0.
Key phrases: stored cross-site scripting (xss)
CVE-2022-24644: ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse.
Key phrases: remote code execution
CVE-2022-24646: Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txtMsg parameters.
Key phrases: sql injection
CVE-2022-24647: Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink() function.
Key phrases: arbitrary file deletion
CVE-2022-2465: Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in ISaGRAF Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.
Key phrases: craft a malicious serialized object that, deserialization of untrusted data, remote code execution
CVE-2022-24651: sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP code execution through /user/upload/upload.
Key phrases: cause arbitrary file uploads, cause arbitrary file uploads through an unauthorized file, unauthorized file upload interface, php code execution
CVE-2022-24652: sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in php code execution in /admin/upload/upload.
Key phrases: cause arbitrary file uploads, cause arbitrary file uploads through an unauthorized file, unauthorized file upload interface, php code execution
CVE-2022-24654: Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.
Key phrases: inject JavaScript code through a crafted payload, authenticated stored cross-site scripting (xss)
CVE-2022-24655: A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.
Key phrases: stack overflow, arbitrary code
CVE-2022-24656: HexoEditor 1.1.8 is affected by Cross Site Scripting (XSS). By putting a common XSS payload in a markdown file, if opened with the app, will execute several times.
Key phrases: cross site scripting (xss), xss payload, execute several times
CVE-2022-24657: Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protocol (port 22).
Key phrases: remotely connect via the SSH protocol (port, hardcoded credentials
CVE-2022-24659: Goldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability which allows unauthenticated attackers to retrieve arbitrary files from the device.
Key phrases: retrieve arbitrary files, retrieve arbitrary files from the device, path traversal
CVE-2022-2466: It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.
Key phrases: http requests header context, unpredictable behavior
CVE-2022-24660: The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext.
Key phrases: access passwords and other sensitive information in plaintext
CVE-2022-24661: A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process.
Key phrases: execute code in the context of the current, memory corruption
CVE-2022-24663: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.
CVE-2022-24664: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.
Key phrases: php code snippets
CVE-2022-24665: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.
Key phrases: php code snippets, wordpress gutenberg block
CVE-2022-24666: A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS frame where the frame contains priority information without any other data. This logical error caused confusion about the size of the frame, leading to a parsing error. This parsing error immediately crashes the entire process. Sending a HEADERS frame with HTTP/2 priority information does not require any special permission, so any HTTP/2 connection peer may send such a frame. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send an appropriately crafted frame. The impact on availability is high: receiving the frame immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send appropriately crafted frames, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself: swift-nio-http2 is parsing the frame in memory-safe code, so the crash is safe. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle the condition. The issue was found by automated fuzzing by oss-fuzz.
Key phrases: connect to them may launch such an attack, denial of service, availability, crash, confidentiality, confidentiality and integrity
CVE-2022-24667: A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. There are a number of implementation errors in the parsing of HPACK-encoded header blocks that allow maliciously crafted HPACK header blocks to cause crashes in processes using swift-nio-http2. Each of these crashes is triggered instead of an integer overflow. A malicious HPACK header block could be sent on any of the HPACK-carrying frames in a HTTP/2 connection (HEADERS and PUSH_PROMISE), at any position. Sending a HPACK header block does not require any special permission, so any HTTP/2 connection peer may send one. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send an appropriately crafted field block. The impact on availability is high: receiving a frame carrying this field block immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send appropriately crafted field blocks, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself: swift-nio-http2 is parsing the field block in memory-safe code and the crash is triggered instead of an integer overflow. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle all conditions in the function. The principal issue was found by automated fuzzing by oss-fuzz, but several associated bugs in the same code were found by code audit and fixed at the same time
Key phrases: cause crashes in processes using swift-nio, connect to them may launch such an attack, denial of service, availability, integer overflow, confidentiality, confidentiality and integrity
CVE-2022-24668: A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical error after frame parsing but before frame handling. ORIGIN and ALTSVC frames are not currently supported by swift-nio-http2, and should be ignored. However, one code path that encounters them has a deliberate trap instead. This was left behind from the original development process and was never removed. Sending an ALTSVC or ORIGIN frame does not require any special permission, so any HTTP/2 connection peer may send such a frame. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send one of these frames. The impact on availability is high: receiving the frame immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send these frames, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself. This is a controlled, intentional crash. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle the condition. The issue was found by automated fuzzing by oss-fuzz.
Key phrases: connect to them may launch such an attack, denial of service, availability, crash, confidentiality, confidentiality and integrity
CVE-2022-24669: It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services.
Key phrases: gain some details of the deployment through a, be used to probe internal network services
CVE-2022-2467: A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input 1@a.com' AND (SELECT 6427 FROM (SELECT(SLEEP(5)))LwLu) AND 'hsvT'='hsvT leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Key phrases: sql injection
CVE-2022-24670: An attacker can use the unrestricted LDAP queries to determine configuration entries
Key phrases: ldap queries
CVE-2022-24671: A link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150 and below could allow a local attacker to modify a file during the update process and escalate their privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Key phrases: obtain the ability to execute low-privileged, modify a file during the update process and, privilege escalation, escalate privilege
CVE-2022-24672: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Canon, execute code
CVE-2022-24673: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Canon, execute code
CVE-2022-24674: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15834.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Canon, execute code
CVE-2022-24675: encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
Key phrases: decode stack overflow
CVE-2022-24676: update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.
Key phrases: allows arbitrary file upload, arbitrary file upload via a crafted ZIP archive
CVE-2022-24677: Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php.
Key phrases: conf.php, remote code execution
CVE-2022-24678: An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow an attacker to flood a temporary log location and consume all disk space on affected installations.
Key phrases: flood a temporary log location and consume all, security agent resource exhaustion denial-of-service, denial of service
CVE-2022-24679: A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create an writable folder in an arbitrary location and escalate privileges affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Key phrases: obtain the ability to execute low-privileged, create an writable folder in an arbitrary location, local privilege escalation, escalate privilege
CVE-2022-2468: A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /editbrand.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Key phrases: sql injection
CVE-2022-24680: A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create a mount point and leverage this for arbitrary folder deletion, leading to escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Key phrases: obtain the ability to execute low-privileged, create a mount point and leverage this for, local privilege escalation, escalate privilege
CVE-2022-24681: Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen.
Key phrases: the Reset Password, xss
CVE-2022-24682: An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.
Key phrases: causing arbitrary markup, unescaped
CVE-2022-24683: HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec (or job-submit) capabilities to read arbitrary files on the host filesystem as root.
Key phrases: read arbitrary files, read arbitrary files on the host filesystem as, read-fs, alloc-exec
CVE-2022-24684: HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16, 1.1.11, and 1.2.5 allow operators with job-submit capabilities to use the spread stanza to panic server agents. Fixed in 1.0.18, 1.1.12, and 1.2.6.
Key phrases: use the spread stanza to panic server agents
CVE-2022-24685: HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.
Key phrases: invalid HCL for the jobs parse endpoint, invalid hcl, excessive cpu usage
CVE-2022-24686: HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6
Key phrases: race condition
CVE-2022-24687: HashiCorp Consul and Consul Enterprise 1.9.0 through 1.9.14, 1.10.7, and 1.11.2 clusters with at least one Ingress Gateway allow a user with service:write to register a specifically-defined service that can cause Consul servers to panic. Fixed in 1.9.15, 1.10.8, and 1.11.3.
Key phrases: register a specifically-defined service that can, service:write, panic
CVE-2022-24688: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The Touch settings allow unrestricted file upload (and consequently Remote Code Execution) via PDF upload with PHP content and a .php extension. The attacker must hijack or obtain privileged user access to the Parameters page in order to exploit this issue. (That can be easily achieved by exploiting the Broken Access Control with further Brute-force attack or SQL Injection.) The uploaded file is stored within the database and copied to the sync web folder if the attacker visits a certain .php?action= page.
Key phrases: obtain privileged, the Parameters page in order to exploit this, remote code execution, broken access control, brute-force, sql injection, unrestricted file upload, hijack
CVE-2022-24689: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote attacker to access account information pages (including personal data) without being authenticated. The collected information includes the badge numbers that operate as user login names. They have a PIN code. The PIN code is 4 digits and thus can be guessed in 10000 brute force attempts.
Key phrases: access account information pages (including personal data, access control, brute force attempts
CVE-2022-2469: GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client
Key phrases: server-side read-out-of-bounds
CVE-2022-24690: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection vulnerability allows unauthenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based. (An unauthenticated attacker can discover the endpoint by abusing a Broken Access Control issue with further SQL injection attacks to gather all user's badge numbers and PIN codes.)
Key phrases: taint database data and extract sensitive information via, sql injection, broken access control
CVE-2022-24691: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based.
Key phrases: taint database data and extract sensitive information via, sql injection
CVE-2022-24692: An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The new menu option within the general Parameters page is vulnerable to stored XSS. The attacker can create a menu option, make it visible to every application user, and conduct session hijacking, account takeover, or malicious code delivery, with the final goal of achieving client-side code execution.
Key phrases: xss, session hijacking, account takeover, malicious code delivery, client-side code execution
CVE-2022-24693: Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.)
Key phrases: hardcoded credentials
CVE-2022-24694: In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. (Only folder names are affected. Neither file names nor file contents are affected.)
CVE-2022-24695: Bluetooth Classic in Bluetooth Core Specification through 5.3 does not properly conceal device information for Bluetooth transceivers in Non-Discoverable mode. By conducting an efficient over-the-air attack, an attacker can fully extract the permanent, unique Bluetooth MAC identifier, along with device capabilities and identifiers, some of which may contain identifying information about the device owner. This additionally allows the attacker to establish a connection to the target device.
Key phrases: establish a connection to the target device, over-the-air
CVE-2022-24696: Mirametrix Glance before 5.1.1.42207 (released on 2018-08-30) allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites.
Key phrases: elevate privileges
CVE-2022-24697: Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of -- conf= to inject any operating system command into the command line parameters. This vulnerability affects Kylin 2 version 2.6.5 and earlier, Kylin 3 version 3.1.2 and earlier, and Kylin 4 version 4.0.1 and earlier.
Key phrases: command injection, rce
CVE-2022-2470: Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21.
Key phrases: cross-site scripting (xss)