CVE-2022-0951

File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc

File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0950

Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0949

WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbots_grava_fingerprint AJAX action, available to unauthenticated users, leading to a SQL injection

CVSS 3.1 · 9.8 Critical EPSS 7.7% KEV · Not listed

Vendors

Stopbadbots

Products

Block And Stop Bad Bots

CVE-2022-0948

Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi

The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection

CVSS 3.1 · 9.8 Critical EPSS 9.9% KEV · Not listed

Vendors

Pluginbazaar

Products

Order Listener For Woocommerce

CVE-2022-0947

Arctic Wireless Gateway Firewall vulnerability

A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Arc600a2323na Arc600a2323na Firmware Arc600a2324na and 45 more

CVE-2022-0946

Stored XSS viva cshtm file upload in star7th/showdoc

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0945

Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0944

Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.

CVSS 3.1 · 7.2 High EPSS 8.5% KEV · Not listed

Vendors

Sqlpad

Products

Sqlpad

CVE-2022-0943

Heap-based Buffer Overflow occurs in vim in vim/vim

Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 2 more

Products

Macos Debian Linux Fedora and 2 more

CVE-2022-0942

Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0941

Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0940

Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0939

Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.

CVSS 3.1 · 9.9 Critical EPSS 1.1% KEV · Not listed

Vendors

Janeczku

Products

Calibre-web

CVE-2022-0938

Stored XSS via file upload in star7th/showdoc

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0937

Stored xss in showdoc through file upload in star7th/showdoc

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Showdoc

Products

Showdoc

CVE-2022-0936

Cross-site Scripting (XSS) - Stored in autolab/autolab

Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Autolabproject

Products

Autolab

CVE-2022-0935

Host Header injection in password Reset in livehelperchat/livehelperchat

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed

Vendors

Livehelperchat

Products

Live Helper Chat

CVE-2022-0932

Missing Authorization in saleor/saleor

Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2.

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed

Vendors

Saleor

Products

Saleor

CVE-2022-0930

File upload filter bypass leading to stored XSS in microweber/microweber

File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Microweber

Products

Microweber

CVE-2022-0929

XSS on dynamic_text module in microweber/microweber

XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed

Vendors

Microweber

Products

Microweber