CVE-2022-29376 CWE-276 Reference url : https://github.com/ycdxsb/Vuln/blob/main/CVE-2022-29376/CVE-2022-29376.md Reference name : https://github.com/ycdxsb/Vuln/blob/main/CVE-2022-29376/CVE-2022-29376.md Reference source : Reference tags : Reference lang :en Reference description : Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.
CVE-2022-29362 CWE-79 Reference url : https://github.com/SeriaWei/ZKEACMS/issues/457 Reference name : https://github.com/SeriaWei/ZKEACMS/issues/457 Reference source : Reference tags : Exploit Reference lang :en Reference description : A cross-site scripting (XSS) vulnerability in /navigation/create?ParentID=%23 of ZKEACMS v3.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ParentID parameter.
CVE-2022-0369 Reference url : https://www.zerodayinitiative.com/advisories/ZDI-23-450/ Reference name : ZDI-23-450 Reference source : Reference tags : Third Party Advisory Reference lang :en Reference description : Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
The specific flaw exists within the Restore Workspace feature. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-17227.
CVE-2022-1292 CWE-78 Reference url : https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf Reference name : https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf Reference source : Reference tags : Third Party Advisory Reference lang :en Reference description : The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).
CVE-2022-38386 Reference url : https://exchange.xforce.ibmcloud.com/vulnerabilities/233778 Reference name : https://exchange.xforce.ibmcloud.com/vulnerabilities/233778 Reference source : Reference tags : Vendor Advisory Reference lang :en Reference description : IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute for sensitive cookies which could allow an attacker to obtain sensitive information using man-in-the-middle techniques. IBM X-Force ID: 233778.
CVE-2022-43656 Reference url : https://www.zerodayinitiative.com/advisories/ZDI-23-345/ Reference name : ZDI-23-345 Reference source : Reference tags : Third Party Advisory Reference lang :en Reference description : Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of FBX files. Crafted data in an FBX file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-18492.
CVE-2022-20634 CWE-601 Reference url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-multivulns-kbK2yVhR Reference name : cisco-sa-ece-multivulns-kbK2yVhR Reference source : Reference tags : Vendor Advisory Reference lang :en Reference description : A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user to an undesired web page.
This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to cause the interface to redirect the user to a specific, malicious URL. This type of vulnerability is known as an open redirect and is used in phishing attacks that get users to unknowingly visit malicious sites.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
