{"vulnerability": "CVE-2022-2555", "sightings": [{"uuid": "dbf84e2d-599f-4946-97ff-389b6af86ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2555", "type": "seen", "source": "https://t.me/cibsecurity/48482", "content": "\u203c CVE-2022-2555 \u203c\n\nThe Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-22T18:20:36.000000Z"}, {"uuid": "1b8e2173-5432-425e-bac2-87024c061e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25558", "type": "seen", "source": "https://t.me/cibsecurity/38695", "content": "\u203c CVE-2022-25558 \u203c\n\nTenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ProvinceCode parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:22:56.000000Z"}, {"uuid": "d3461a81-f551-4c9f-a3cc-044e90535815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25555", "type": "seen", "source": "https://t.me/cibsecurity/38723", "content": "\u203c CVE-2022-25555 \u203c\n\nTenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ntpServer parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:26:13.000000Z"}]}