Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
is able to address this issue. The name of the patch is ad4ba171c974c65c3456e7c6228f59f40783b33d. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216199. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216199 - https://github.com/khromov/wp-english-wp-admin/commit/ad4ba171c974c65c3456e7c6228f59f40783b33d - https://github.com/khromov/wp-english-wp-admin/releases/tag/1.5.2
CVE ID: CVE-2022-4605 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-14T18:02:35.745Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: flatpressblog Products: flatpressblog/flatpress Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/df455d44-0dec-470c-b576-8ea86ec5a367 - https://github.com/flatpressblog/flatpress/commit/742f8b04f233e3cc52bed11f79fcc9911faee776
CVE ID: CVE-2022-4606 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-14T18:02:49.453Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: flatpressblog Products: flatpressblog/flatpress Problem Types: CWE-98 Description: PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3dab0466-c35d-4163-b3c7-a8666e2f7d95 - https://github.com/flatpressblog/flatpress/commit/c30d52b28483e1e512d0d81758d4c149f02b4068
CVE ID: CVE-2022-4607 State: PUBLISHED Published: 2022-12-18T00:00:00 Last Updated: 2024-08-03T01:41:45.608Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: 3D City Database Products: OGC Web Feature Service Problem Types: CWE-611 Description: A vulnerability was found in 3D City Database OGC Web Feature Service up to 5.2.0. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to xml external entity reference. Upgrading to version 5.2.1 is able to address this issue. The name of the patch is 246f4e2a97ad81491c00a7ed72ce5e7c7f75050a. It is recommended to upgrade the affected component. The associated identifier
46f4e2a97ad81491c00a7ed72ce5e7c7f75050a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216215. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216215 - https://github.com/3dcitydb/web-feature-service/pull/12 - https://github.com/3dcitydb/web-feature-service/commit/246f4e2a97ad81491c00a7ed72ce5e7c7f75050a - https://github.com/3dcitydb/web-feature-service/releases/tag/v5.2.1
CVE ID: CVE-2022-4608 State: PUBLISHED Published: 2023-07-26T05:26:42.720Z Last Updated: 2025-03-05T18:46:44.864Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: RTU500 series Problem Types: CWE-787 Description: A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP
ters causes an unexpected restart due to a stack overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://publisher.hitachienergy.com/preview?DocumentID=8DBD000121&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2022-4609 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-14T18:03:01.318Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/5b3115c5-776c-43d3-a7be-c8dc13ab81ce - https://github.com/usememos/memos/commit/726285e63467820f94cbf872abe71025a161c212
CVE ID: CVE-2022-4610 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-15T12:56:37.245Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Click Studios Products: Passwordstate, Passwordstate Browser Extension Chrome Problem Types: CWE-310 Description: A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vul
quired to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216272. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html - https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdf - https://vuldb.com/?id.216272
CVE ID: CVE-2022-4611 State: PUBLISHED Published: 2022-12-19T00:00:00 Last Updated: 2024-08-03T01:48:38.704Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Click Studios Products: Passwordstate, Passwordstate Browser Extension Chrome Problem Types: CWE-798 Description: A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The identifie
oit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The identifier VDB-216273 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216273 - https://vuldb.com/?ctiid.216273 - https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html
CVE ID: CVE-2022-4612 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-15T12:56:28.864Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Click Studios Products: Passwordstate, Passwordstate Browser Extension Chrome Problem Types: CWE-522 Description: A vulnerability has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as problematic. This vulnerability affects unknown code. The manipulation leads to insufficiently protected credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected compone
emotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. VDB-216274 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html - https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdf - https://vuldb.com/?id.216274
CVE ID: CVE-2022-4613 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-15T12:56:21.578Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Click Studios Products: Passwordstate, Passwordstate Browser Extension Chrome Problem Types: CWE-266 Description: A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the component Browser Extension Provisioning. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to u
e attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216275. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.html - https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdf - https://vuldb.com/?id.216275
CVE ID: CVE-2022-4614 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-14T18:03:13.850Z Severity: LOW (CVSS 2.3 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: alagrede Products: alagrede/znote-app Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository alagrede/znote-app prior to 1.7.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/8b429330-3096-4fe4-85e0-1a9143e4dca5 - https://github.com/alagrede/znote-app/commit/d889337b9c3ed16ca1aa43837af0960321dd77f2
CVE ID: CVE-2022-4615 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-14T18:03:28.838Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/9c66ece4-bcaa-417d-8b98-e8daff8a728b - https://github.com/openemr/openemr/commit/d5eb41697f7f1bc2c7ee5bc9bbf58684e1c8cc14
CVE ID: CVE-2022-4616 State: PUBLISHED Published: 2023-01-12T23:54:02.112Z Last Updated: 2025-01-16T22:01:59.638Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Industrial Automation Products: 4G Router DX-3021 Problem Types: CWE-77 Description: The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05 - https://downloadcenter
CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05 - https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC
CVE ID: CVE-2022-4617 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T18:04:21.577Z Severity: LOW (CVSS 2.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1fb2ce08-7016-45fa-b402-ec08d700e4df - https://github.com/microweber/microweber/commit/df8add930ecfa7f5b18c67c3f748c137fe890906
CVE ID: CVE-2022-4618 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-4619 State: PUBLISHED Published: 2022-12-20T15:17:07.161Z Last Updated: 2025-01-23T20:26:12.917Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: rsukhar Products: Sidebar Widgets by CodeLights Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Sidebar Widgets by CodeLights plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Extra CSS class’ parameter in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to
output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3feb84c9-fc98-4f59-a124-b6434e5b8a44 - https://wordpress.org/plugins/codelights-shortcodes-and-widgets/
CVE ID: CVE-2022-4621 State: PUBLISHED Published: 2023-01-17T16:36:58.518Z Last Updated: 2025-01-16T22:01:13.339Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Panasonic Products: Sanyo CCTV Network Camera Problem Types: CWE-352 Description: Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are vulnerable to CSRFs that can be exploited to allow an attacker to perform changes with administrator level privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-04 - https://archives.connect.panasonic.com/security/sanyo/index.html
CVE ID: CVE-2022-4622 State: PUBLISHED Published: 2023-02-21T08:50:48.474Z Last Updated: 2025-03-12T20:22:59.072Z Vendors: Unknown Products: Login Logout Menu Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ea055ed4-324d-4d77-826a-b6f814413eb2
CVE ID: CVE-2022-4623 State: PUBLISHED Published: 2023-07-04T07:23:28.054Z Last Updated: 2024-11-22T15:28:27.198Z Vendors: Unknown Products: ND Shortcodes Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The ND Shortcodes WordPress plugin before 7.0 does not validate and escape numerous of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1b3201da-f254-406f-9b4a-cd5025b6b03d
CVE ID: CVE-2022-4624 State: PUBLISHED Published: 2023-01-23T14:31:31.474Z Last Updated: 2025-04-02T15:14:47.043Z Vendors: Unknown Products: GS Logo Slider Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The GS Logo Slider WordPress plugin before 3.3.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e7dc0202-6be4-46fc-a451-fb3a25727b51
CVE ID: CVE-2022-4625 State: PUBLISHED Published: 2023-01-23T14:31:23.333Z Last Updated: 2025-04-02T15:53:24.612Z Vendors: Unknown Products: Login Logout Menu Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cd6657d5-810c-4d0c-8bbf-1f8d4a2
ogram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cd6657d5-810c-4d0c-8bbf-1f8d4a2d8d15
CVE ID: CVE-2022-4626 State: PUBLISHED Published: 2023-02-06T19:59:50.239Z Last Updated: 2025-03-25T17:37:26.363Z Vendors: Unknown Products: PPWP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The PPWP WordPress plugin before 1.8.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/59c577e9-7d1c-46bc-9218-3e143068738d
CVE ID: CVE-2022-4627 State: PUBLISHED Published: 2023-01-23T14:31:51.276Z Last Updated: 2025-04-02T14:46:27.381Z Vendors: Unknown Products: ShiftNav Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The ShiftNav WordPress plugin before 1.7.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/be9e8870-0682-441d-8955-d096d1346bd1
CVE ID: CVE-2022-4628 State: PUBLISHED Published: 2023-02-13T14:32:04.118Z Last Updated: 2025-03-21T14:34:46.969Z Vendors: Unknown Products: Easy PayPal Buy Now Button Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy PayPal Buy Now Button WordPress plugin before 1.7.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6ae719da-c43c-4b3a-bb8a-efa1de20100a
CVE ID: CVE-2022-4629 State: PUBLISHED Published: 2023-01-23T14:31:26.062Z Last Updated: 2025-04-02T15:40:09.709Z Vendors: Unknown Products: Product Slider for WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Product Slider for WooCommerce WordPress plugin before 2.6.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cf0a5
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cf0a51f9-21d3-4ae8-b7d2-361921038fe8
CVE ID: CVE-2022-4630 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T18:04:34.559Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: lirantal Products: lirantal/daloradius Problem Types: CWE-1004 Description: Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/401661ee-40e6-4ee3-a925-3716b96ece5c - https://github.com/lirantal/daloradius/commit/6878619dc661b3009429777a1aeeb383ddc0166b
CVE ID: CVE-2022-4631 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:28:15.493Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: WP-Ban Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 22b925449c84faa9b7496abe4f8f5661cb5eb3bf. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216480. Additional Analyst Notes: - CVE Program
ade the affected component. The identifier of this vulnerability is VDB-216480. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lesterchan/wp-ban/commit/22b925449c84faa9b7496abe4f8f5661cb5eb3bf - https://vuldb.com/?id.216480
CVE ID: CVE-2022-4632 State: PUBLISHED Published: 2022-12-21T00:00:00 Last Updated: 2024-11-19T20:21:10.157Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: Auto Upload Images Problem Types: CWE-79 Description: A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 895770ee93887ec78429c78ffdfb865bee6f9436. It is recommended to upgrade the affected component. The identifier VDB-216481
895770ee93887ec78429c78ffdfb865bee6f9436. It is recommended to upgrade the affected component. The identifier VDB-216481 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216481 - https://github.com/airani/wp-auto-upload/commit/895770ee93887ec78429c78ffdfb865bee6f9436 - https://github.com/airani/wp-auto-upload/releases/tag/v3.3.1
CVE ID: CVE-2022-4633 State: PUBLISHED Published: 2022-12-21T00:00:00 Last Updated: 2024-08-03T01:48:39.518Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: Auto Upload Images Problem Types: CWE-352 Description: A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 895770ee93887ec78429c78ffdfb865bee6f9436. It is recomm
ion 3.3.1 is able to address this issue. The name of the patch is 895770ee93887ec78429c78ffdfb865bee6f9436. It is recommended to upgrade the affected component. VDB-216482 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216482 - https://github.com/airani/wp-auto-upload/commit/895770ee93887ec78429c78ffdfb865bee6f9436 - https://github.com/airani/wp-auto-upload/releases/tag/v3.3.1
CVE ID: CVE-2022-4634 State: PUBLISHED Published: 2023-02-02T22:53:40.907Z Last Updated: 2025-01-16T21:58:12.760Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Industrial Automation Products: ScreenEditor, CNCSoft Problem Types: CWE-121 Description: All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-01