Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-32967 State: PUBLISHED Published: 2022-11-29T03:30:27.572Z Last Updated: 2025-04-23T14:33:40.929Z Severity: LOW (CVSS 2.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Realtek Products: RTL8111EP-CG, RTL8111FP-CG Problem Types: CWE-798 Description: RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6740-ba9bd-1.html
CVE ID: CVE-2022-32969 State: PUBLISHED Published: 2022-06-29T14:37:46 Last Updated: 2024-08-03T07:54:03.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used for a BIP39 mnemonic, and Firefox and Chromium save such fields to disk in order to support the Restore Session feature, aka the Demonic issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MetaMask/metamask-extension/compare/v10.11.2...v10.11.3 - https://halborn.com/disclosures/demonic-vulnerability/ - https://halborn.com/halborn-discovers-critical-vulnerability-affect
s://halborn.com/disclosures/demonic-vulnerability/ - https://halborn.com/halborn-discovers-critical-vulnerability-affecting-crypto-wallet-browser-extensions/
CVE ID: CVE-2022-32970 State: PUBLISHED Published: 2023-05-10T08:56:39.069Z Last Updated: 2025-01-09T15:19:30.915Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Themify Products: Themify Portfolio Post Problem Types: CWE-79 Description: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Themify Themify Portfolio Post plugin <= 1.2.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/themify-portfolio-post/wordpress-themify-portfolio-post-plugin-1-2-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-32971 State: PUBLISHED Published: 2023-02-16T20:00:14.395Z Last Updated: 2025-01-27T18:17:25.808Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) SUR software Problem Types: escalation of privilege Description: Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html
CVE ID: CVE-2022-32972 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T16:12:13.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://infoblox.com - https://community.infoblox.com/t5/trending-kb-articles/cve-2022-32972-infoblox-bloxone-endpoint-for-windows-local/ba-p/24912
CVE ID: CVE-2022-32973 State: PUBLISHED Published: 2022-06-21T14:23:30 Last Updated: 2024-08-03T07:54:03.459Z Vendors: n/a Products: Nessus Problem Types: Command Injection Description: An authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and executes commands with administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2022-11
CVE ID: CVE-2022-32974 State: PUBLISHED Published: 2022-06-21T14:23:31 Last Updated: 2024-08-03T07:54:03.398Z Vendors: n/a Products: Nessus Problem Types: Arbitrary File Read Description: An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2022-11
CVE ID: CVE-2022-32978 State: PUBLISHED Published: 2022-06-10T14:49:06 Last Updated: 2024-08-03T07:54:03.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorfdbg/libjpeg/issues/75 - https://github.com/thorfdbg/libjpeg/commit/4746b577931e926a49e50de9720a4946de3069a7
CVE ID: CVE-2022-32981 State: PUBLISHED Published: 2022-06-10T19:42:34 Last Updated: 2024-08-03T07:54:03.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER (aka PEEKUSR and POKEUSR) when accessing floating point registers. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?id=8e1278444446fc97778a5e5c99bca1ce0bbc5ec9 - http://www.openwall.com/lists/oss-security/2022/06/14/3
CVE ID: CVE-2022-32983 State: PUBLISHED Published: 2022-06-20T15:05:01 Last Updated: 2024-08-03T07:54:03.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CZ-NIC/knot-resolver/commit/ccb9d9794db5eb757c33becf65cb1cf48ecfd968 - https://knot-resolver.readthedocs.io/en/stable/modules-policy.html#forwarding
CVE ID: CVE-2022-32984 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:38:13.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. The sensitive information, found in the HTML source code, includes the xpub of the store. Also, if the store isn't using the internal lightning node, the credentials of a lightning node are exposed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.btcpayserver.org/btcpay-server-cve-2022-32984/
CVE ID: CVE-2022-32985 State: PUBLISHED Published: 2022-07-17T22:48:58 Last Updated: 2024-08-03T07:54:03.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201. Additional Analyst Notes: - CVE Program Container: References: - https://www.nexans.de/de/products/Data-Network-Solutions/Industrial-and-office-switches.html - https://sec-consult.com/vulnerability-lab/advisory/hardcoded-backdoor-user-outdated-software-components-nexans-ftto-gigaswitch/
CVE ID: CVE-2022-32987 State: PUBLISHED Published: 2022-06-23T18:38:33 Last Updated: 2024-08-03T07:54:03.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/mayank-s16/19b22b3b356646dce2639a9400f3f7d9 - https://www.campcodes.com/projects/php/simple-bakery-shop-management-system/
CVE ID: CVE-2022-32988 State: PUBLISHED Published: 2022-06-30T23:09:50 Last Updated: 2024-08-03T07:54:03.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in router Asus DSL-N14U-B1 1.1.2.3_805 via the "*list" parameters (e.g. filter_lwlist, keyword_rulelist, etc) in every ".asp" page containing a list of stored strings. The following asp files are affected: (1) cgi-bin/APP_Installation.asp, (2) cgi-bin/Advanced_ACL_Content.asp, (3) cgi-bin/Advanced_ADSL_Content.asp, (4) cgi-bin/Advanced_ASUSDDNS_Content.asp, (5) cgi-bin/Advanced_AiDisk_ftp.asp, (6) cgi-bin/Advanced_AiDisk_samba.asp, (7) cgi-bin/Advanced_DSL_Content.asp, (8) cgi-bin/Adva
n/Advanced_AiDisk_ftp.asp, (6) cgi-bin/Advanced_AiDisk_samba.asp, (7) cgi-bin/Advanced_DSL_Content.asp, (8) cgi-bin/Advanced_Firewall_Content.asp, (9) cgi-bin/Advanced_FirmwareUpgrade_Content.asp, (10) cgi-bin/Advanced_GWStaticRoute_Content.asp, (11) cgi-bin/Advanced_IPTV_Content.asp, (12) cgi-bin/Advanced_IPv6_Content.asp, (13) cgi-bin/Advanced_KeywordFilter_Content.asp, (14) cgi-bin/Advanced_LAN_Content.asp, (15) cgi-bin/Advanced_Modem_Content.asp, (16) cgi-bin/Advanced_PortTrigger_Content.asp, (17) cgi-bin/Advanced_QOSUserPrio_Content.asp, (18) cgi-bin/Advanced_QOSUserRules_Content.asp, (19) cgi-bin/Advanced_SettingBackup_Content.asp, (20) cgi-bin/Advanced_System_Content.asp, (21) cgi-bin
les_Content.asp, (19) cgi-bin/Advanced_SettingBackup_Content.asp, (20) cgi-bin/Advanced_System_Content.asp, (21) cgi-bin/Advanced_URLFilter_Content.asp, (22) cgi-bin/Advanced_VPN_PPTP.asp, (23) cgi-bin/Advanced_VirtualServer_Content.asp, (24) cgi-bin/Advanced_WANPort_Content.asp, (25) cgi-bin/Advanced_WAdvanced_Content.asp, (26) cgi-bin/Advanced_WMode_Content.asp, (27) cgi-bin/Advanced_WWPS_Content.asp, (28) cgi-bin/Advanced_Wireless_Content.asp, (29) cgi-bin/Bandwidth_Limiter.asp, (30) cgi-bin/Guest_network.asp, (31) cgi-bin/Main_AccessLog_Content.asp, (32) cgi-bin/Main_AdslStatus_Content.asp, (33) cgi-bin/Main_Spectrum_Content.asp, (34) cgi-bin/Main_WebHistory_Content.asp, (35) cgi-bin/Par
slStatus_Content.asp, (33) cgi-bin/Main_Spectrum_Content.asp, (34) cgi-bin/Main_WebHistory_Content.asp, (35) cgi-bin/ParentalControl.asp, (36) cgi-bin/QIS_wizard.asp, (37) cgi-bin/QoS_EZQoS.asp, (38) cgi-bin/aidisk.asp, (39) cgi-bin/aidisk/Aidisk-1.asp, (40) cgi-bin/aidisk/Aidisk-2.asp, (41) cgi-bin/aidisk/Aidisk-3.asp, (42) cgi-bin/aidisk/Aidisk-4.asp, (43) cgi-bin/blocking.asp, (44) cgi-bin/cloud_main.asp, (45) cgi-bin/cloud_router_sync.asp, (46) cgi-bin/cloud_settings.asp, (47) cgi-bin/cloud_sync.asp, (48) cgi-bin/device-map/DSL_dashboard.asp, (49) cgi-bin/device-map/clients.asp, (50) cgi-bin/device-map/disk.asp, (51) cgi-bin/device-map/internet.asp, (52) cgi-bin/error_page.asp, (53) cgi-
ents.asp, (50) cgi-bin/device-map/disk.asp, (51) cgi-bin/device-map/internet.asp, (52) cgi-bin/error_page.asp, (53) cgi-bin/index.asp, (54) cgi-bin/index2.asp, (55) cgi-bin/qis/QIS_PTM_manual_setting.asp, (56) cgi-bin/qis/QIS_admin_pass.asp, (57) cgi-bin/qis/QIS_annex_setting.asp, (58) cgi-bin/qis/QIS_bridge_cfg_tmp.asp, (59) cgi-bin/qis/QIS_detect.asp, (60) cgi-bin/qis/QIS_finish.asp, (61) cgi-bin/qis/QIS_ipoa_cfg_tmp.asp, (62) cgi-bin/qis/QIS_manual_setting.asp, (63) cgi-bin/qis/QIS_mer_cfg.asp, (64) cgi-bin/qis/QIS_mer_cfg_tmp.asp, (65) cgi-bin/qis/QIS_ppp_cfg.asp, (66) cgi-bin/qis/QIS_ppp_cfg_tmp.asp, (67) cgi-bin/qis/QIS_wireless.asp, (68) cgi-bin/query_wan_status.asp, (69) cgi-bin/quer
cgi-bin/qis/QIS_ppp_cfg_tmp.asp, (67) cgi-bin/qis/QIS_wireless.asp, (68) cgi-bin/query_wan_status.asp, (69) cgi-bin/query_wan_status2.asp, and (70) cgi-bin/start_apply.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FedericoHeichou/DSL-N14U-XSS - https://github.com/FedericoHeichou/CVE-2022-32988
CVE ID: CVE-2022-32990 State: PUBLISHED Published: 2022-06-24T13:17:13 Last Updated: 2024-08-03T07:54:03.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gimp/-/issues/8230
CVE ID: CVE-2022-32991 State: PUBLISHED Published: 2022-06-15T16:21:08 Last Updated: 2024-08-03T07:54:03.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/fd95cc4d-2a38-4e5a-9fac-bfa3534f8056
CVE ID: CVE-2022-32992 State: PUBLISHED Published: 2022-06-15T16:22:29 Last Updated: 2024-08-03T07:54:03.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/d1593cea-f278-4a5e-a6ee-f7a63b641f1d
CVE ID: CVE-2022-32993 State: PUBLISHED Published: 2022-08-29T20:12:05 Last Updated: 2024-08-03T07:54:03.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh. Additional Analyst Notes: - CVE Program Container: References: - http://totolink.com - https://github.com/laotun-s/POC/blob/main/CVE-2022-32993.txt
CVE ID: CVE-2022-32994 State: PUBLISHED Published: 2022-06-27T22:15:38 Last Updated: 2024-08-03T07:54:03.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zongdeiqianxing/cve-reports/issues/1
CVE ID: CVE-2022-32995 State: PUBLISHED Published: 2022-06-27T22:15:39 Last Updated: 2024-08-03T07:54:03.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zongdeiqianxing/cve-reports/issues/2
CVE ID: CVE-2022-32996 State: PUBLISHED Published: 2022-06-24T20:39:38 Last Updated: 2024-08-03T07:54:03.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/django-navbar-client/ - https://github.com/josubg/django_navbar_client/issues/1
CVE ID: CVE-2022-32997 State: PUBLISHED Published: 2022-06-24T20:39:39 Last Updated: 2024-08-03T07:54:03.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/RootInteractive/ - https://github.com/miranov25/RootInteractive/issues/206
CVE ID: CVE-2022-32998 State: PUBLISHED Published: 2022-06-24T20:39:40 Last Updated: 2024-08-03T07:54:03.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/cryptoasset-data-downloader/ - https://github.com/serhatci/cryptocurrency-historical-data-downloader/issues/8
CVE ID: CVE-2022-32999 State: PUBLISHED Published: 2022-06-24T20:39:40 Last Updated: 2024-08-03T07:54:03.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/cloudlabeling/ - https://github.com/SilvioGiancola/CloudLabeling-API/issues/1
CVE ID: CVE-2022-33000 State: PUBLISHED Published: 2022-06-24T20:39:41 Last Updated: 2024-08-03T07:54:03.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/ml-scanner/ - https://github.com/bOrionis/mls/issues/1
CVE ID: CVE-2022-33001 State: PUBLISHED Published: 2022-06-24T20:39:41 Last Updated: 2024-08-03T07:54:03.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/AAmiles/ - https://github.com/bOrionis/AAmiles/issues/1
CVE ID: CVE-2022-33002 State: PUBLISHED Published: 2022-06-24T20:39:45 Last Updated: 2024-08-03T07:54:03.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/kgexplore/ - https://github.com/smoothnlp/KGExplore/issues/13
CVE ID: CVE-2022-33003 State: PUBLISHED Published: 2022-06-24T20:39:45 Last Updated: 2024-08-03T07:54:03.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/watools/ - https://github.com/wateraccounting/watools/issues/5
CVE ID: CVE-2022-33004 State: PUBLISHED Published: 2022-06-24T20:39:46 Last Updated: 2024-08-03T07:54:03.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.doubanio.com/simple/request - https://pypi.org/project/beginner/ - https://github.com/Dreambuilder4028/coder/issues/1
CVE ID: CVE-2022-33005 State: PUBLISHED Published: 2022-06-27T20:56:27 Last Updated: 2024-08-03T07:54:03.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhuoNiBa/Delta-DIAEnergie-XSS
CVE ID: CVE-2022-33007 State: PUBLISHED Published: 2022-06-27T21:37:27 Last Updated: 2024-08-03T07:54:03.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function genacgi_main. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fxc233/CVE/blob/main/bufferoverflow.md
CVE ID: CVE-2022-33009 State: PUBLISHED Published: 2022-06-27T22:28:25 Last Updated: 2024-08-03T07:54:03.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://lightcms.com - https://github.com/eddy8/LightCMS - https://github.com/eddy8/LightCMS/issues/30
CVE ID: CVE-2022-33010 State: REJECTED Published: N/A Last Updated: 2024-05-03T18:38:41.150851 Description: No description available.
CVE ID: CVE-2022-33011 State: PUBLISHED Published: 2022-07-08T11:10:47 Last Updated: 2024-08-03T07:54:03.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idno/known - https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Account%20Takeover#account-takeover-through-password-reset-poisoning - https://www.pethuraj.com/blog/how-i-earned-800-for-host-header-injection-vulnerability/ - https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-softwar
t-header-injection-vulnerability/ - https://blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/
CVE ID: CVE-2022-33012 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T15:23:57.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Account%20Takeover#account-takeover-through-password-reset-poisoning - https://www.pethuraj.com/blog/how-i-earned-800-for-host-header-injection-vulnerability/ - https://github.com/microweber/microweber - https://blog.jitendrapatro.me/cve-2022-33012-acc
r-injection-vulnerability/ - https://github.com/microweber/microweber - https://blog.jitendrapatro.me/cve-2022-33012-account-takeover-through-password-reset-poisoning/
CVE ID: CVE-2022-33014 State: REJECTED Published: 2022-07-02T13:10:43 Last Updated: 2022-07-02T13:10:43 Description: No description available.
CVE ID: CVE-2022-33015 State: REJECTED Published: 2022-07-02T13:01:41 Last Updated: 2022-07-02T13:01:41 Description: No description available.
CVE ID: CVE-2022-33016 State: REJECTED Published: 2022-07-02T13:13:05 Last Updated: 2022-07-02T13:13:05 Description: No description available.
CVE ID: CVE-2022-33021 State: PUBLISHED Published: 2022-06-29T11:54:20 Last Updated: 2024-08-03T07:54:03.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhwgroup/cva6/issues/884
CVE ID: CVE-2022-33023 State: PUBLISHED Published: 2022-06-29T11:54:21 Last Updated: 2024-08-03T07:54:03.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVA6 commit 909d85a gives incorrect permission to use special multiplication units when the format of instructions is wrong. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhwgroup/cva6/issues/885