Security Vulnerabilities - CVEs Published In 2022
An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allows an attacker, with access to the administration panel, to perform Stored Cross-Site Scripting (XSS). The payload can be executed in multiple scenarios, for example when the user's page appears in the Most Visited section of the page.
CVSS Score
4.8
EPSS Score
0.007
Published
2022-09-15
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js.
CVSS Score
9.8
EPSS Score
0.014
Published
2022-09-15
Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.
CVSS Score
9.8
EPSS Score
0.014
Published
2022-09-15
An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and (after offline cracking) retrieve the PIN and LTK (long-term key).
CVSS Score
4.3
EPSS Score
0.006
Published
2022-09-15
An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference.
CVSS Score
9.1
EPSS Score
0.011
Published
2022-09-15
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.
CVSS Score
9.4
EPSS Score
0.008
Published
2022-09-15
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.
CVSS Score
8.8
EPSS Score
0.008
Published
2022-09-15
Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.
CVSS Score
5.3
EPSS Score
0.008
Published
2022-09-15
OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.
CVSS Score
6.1
EPSS Score
0.005
Published
2022-09-15
An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in AP4_CttsAtom::Create in Core/Ap4CttsAtom.cpp.
CVSS Score
6.5
EPSS Score
0.008
Published
2022-09-15