CVE-2022-0852

convert2rhel: Red Hat account password passed via command line by code

There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via e.g. htop or ps. The specific impact varies upon the privileges of the Red Hat account in question, but it could affect the integrity, availability, and/or data confidentiality of other systems that are administered by that account. This occurs regardless of how the password is supplied to convert2rhel.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Convert2rhel Project Redhat

Products

Convert2rhel Convert2rhel Enterprise Linux

CVE-2022-0851

convert2rhel: Activation key passed via command line by code

There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the activation key via the process command line via e.g. htop or ps. The specific impact varies upon the subscription, but generally this would allow an attacker to register systems purchased by the victim until discovered; a form of fraud. This could occur regardless of how the activation key is supplied to convert2rhel because it involves how convert2rhel provides it to subscription-manager.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Convert2rhel Project Redhat

Products

Convert2rhel Convert2rhel Enterprise Linux

CVE-2022-0850

kernel: information leak in copy_page_to_iter() in iov_iter.c

A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2022-0849

Use After Free in r_reg_get_name_idx in radareorg/radare2

Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Radare

Products

Radare2

CVE-2022-0848

OS Command Injection in part-db/part-db

OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.

CVSS 3.1 · 9.8 Critical EPSS 35.4% KEV · Not listed

Vendors

Part-db Project

Products

Part-db

CVE-2022-0846

SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQLi

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dk_speakout_sendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users

CVSS 3.1 · 9.8 Critical EPSS 8.8% KEV · Not listed

Vendors

Speakout\! Email Petitions Project

Products

Speakout\! Email Petitions

CVE-2022-0845

Code Injection in pytorchlightning/pytorch-lightning

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed

Vendors

Lightningai

Products

Pytorch Lightning

CVE-2022-0842

ePO blind SQL Injection vulnerability

A blind SQL injection vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote authenticated attacker to potentially obtain information from the ePO database. The data obtained is dependent on the privileges the attacker has and to obtain sensitive data the attacker would require administrator privileges.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Epolicy Orchestrator

CVE-2022-0841

OS Command Injection in ljharb/npm-lockfile

OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed

Vendors

Npm-lockfile Project

Products

Npm-lockfile

CVE-2022-0840

Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add icon

The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the image_file field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfiltered_html capability is disallowed.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Cybernetikz

Products

Easy Social Icons

CVE-2022-0838

Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed

Vendors

Hestiacp

Products

Control Panel

CVE-2022-0837

Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure

The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS notification as well as retrieve sensitive information about the admin, such as the email, account balance and payment history. A malicious actor can abuse this vulnerability to drain out the account balance by keep sending SMS notification.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Tms-outsource

Products

Amelia

CVE-2022-0836

SEMA API < 4.02 - Unauthenticated SQLi

The SEMA API WordPress plugin before 4.02 does not properly sanitise and escape some parameters before using them in SQL statements via an AJAX action, leading to SQL Injections exploitable by unauthenticated users

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed

Vendors

Semadatacoop

Products

Sema Api

CVE-2022-0833

Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure

The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a publicly accessible temporary file generated by the plugin in order to disclose the final backup filename, which can then be fetched by the attacker to download the backup of the plugin's DB data

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Church Admin Project

Products

Church Admin

CVE-2022-0832

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

CVSS 3.1 · 5.4 Medium EPSS 66.6% KEV · Not listed

Vendors

Pimcore

Products

Pimcore

CVE-2022-0831

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

CVSS 3.1 · 5.4 Medium EPSS 1.3% KEV · Not listed

Vendors

Pimcore

Products

Pimcore

CVE-2022-0830

FormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF

The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms, and does not sanitise as well as escape its form field values. As a result, attackers could make logged in admin update and delete arbitrary forms via a CSRF attack, and put Cross-Site Scripting payloads in them.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Formbuilder Project

Products

Formbuilder

CVE-2022-0829

Improper Authorization in webmin/webmin

Improper Authorization in GitHub repository webmin/webmin prior to 1.990.

CVSS 3.1 · 8.1 High EPSS 1.3% KEV · Not listed

Vendors

Webmin

Products

Webmin

CVE-2022-0827

Bestbooks <= 2.6.3 - Unauthenticated SQLi

The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

CVSS 3.1 · 9.8 Critical EPSS 9.1% KEV · Not listed

Vendors

Presspage

Products

Bestbooks

CVE-2022-0826

WP Video Gallery <= 1.7.1 - Unauthenticated SQLi

The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

CVSS 3.1 · 9.8 Critical EPSS 9.1% KEV · Not listed

Vendors

Wp-video-gallery-free Project

Products

Wp-video-gallery-free