Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34899 State: PUBLISHED Published: 2022-07-18T14:17:40 Last Updated: 2024-08-03T09:22:10.747Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Parallels Products: Access Problem Types: CWE-367 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Parallels service. By creating a symbolic link, an attacker can abuse the service to execute a file. An attacker can leverage this vulnerabili
creating a symbolic link, an attacker can abuse the service to execute a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16134. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-947/ - https://kb.parallels.com/en/129010
CVE ID: CVE-2022-34900 State: PUBLISHED Published: 2022-07-18T14:17:46 Last Updated: 2024-08-03T09:22:10.823Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Parallels Products: Access Problem Types: CWE-427 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Dispatcher service. The service loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to es
ervice loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-15213. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/en/129010 - https://www.zerodayinitiative.com/advisories/ZDI-22-945/
CVE ID: CVE-2022-34901 State: PUBLISHED Published: 2022-07-18T14:17:51 Last Updated: 2024-08-03T09:22:10.743Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Parallels Products: Access Problem Types: CWE-427 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Parallels Service. The service executes files from an unsecured location. An attacker can leverage this vulnerability to escalate privileges
he service executes files from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-16137. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/en/129010 - https://www.zerodayinitiative.com/advisories/ZDI-22-948/
CVE ID: CVE-2022-34902 State: PUBLISHED Published: 2022-07-18T14:17:56 Last Updated: 2024-08-03T09:22:10.726Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Parallels Products: Access Problem Types: CWE-427 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Desktop Control Agent service. The service loads Qt plugins from an unsecured location. An attacker can leverage this vulnerability to escalate p
vice. The service loads Qt plugins from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-15787. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/en/129010 - https://www.zerodayinitiative.com/advisories/ZDI-22-946/
CVE ID: CVE-2022-34903 State: PUBLISHED Published: 2022-07-01T21:05:18 Last Updated: 2024-08-03T09:22:10.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/06/30/1 - https://bugs.debian.org/1014157 - https://dev.gnupg.org/T6027 - http://www.openwall.com/lists/oss-security/2022/07/02/1 - https://www.debian.org/security/2022/dsa-5174 - ht
org/T6027 - http://www.openwall.com/lists/oss-security/2022/07/02/1 - https://www.debian.org/security/2022/dsa-5174 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPTAR76EIZY7NQFENSOZO7U473257OVZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VN63GBTMRWO36Y7BKA2WQHROAKCXKCBL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRLWJQ76A4UKHI3Q36BKSJKS4LFLQO33/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU64FUVG2PRZBSHFOQRSP7KDVEIZ23OS/ - https://security.netapp.com/advisory/ntap-20220826
40lists.fedoraproject.org/message/VU64FUVG2PRZBSHFOQRSP7KDVEIZ23OS/ - https://security.netapp.com/advisory/ntap-20220826-0005/
CVE ID: CVE-2022-34906 State: PUBLISHED Published: 2022-07-25T20:26:14 Last Updated: 2024-08-03T09:22:10.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to decrypt sensitive information saved in FileWave, and even send crafted requests. Additional Analyst Notes: - CVE Program Container: References: - https://kb.filewave.com/pages/viewpage.action?pageId=55544244 - https://claroty.com/2022/07/25/blog-research-with-management-comes-risk-finding-flaws-in-filewave-mdm/
CVE ID: CVE-2022-34907 State: PUBLISHED Published: 2022-07-25T20:17:44 Last Updated: 2024-08-03T09:22:10.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to gain access to the system with the highest authority possible and gain full control over the FileWave platform. Additional Analyst Notes: - CVE Program Container: References: - https://kb.filewave.com/pages/viewpage.action?pageId=55544244 - https://claroty.com/2022/07/25/blog-research-with-management-comes-risk-finding-flaws-in-filewave-mdm/
CVE ID: CVE-2022-34908 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-05-30T16:02:10.463Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization to retrieve application data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.aremis.com/en_GB/welcome
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.aremis.com/en_GB/welcome - https://excellium-services.com/cert-xlm-advisory/CVE-2022-34908 - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34908
CVE ID: CVE-2022-34909 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-05-30T16:02:13.360Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AC:L/AV:L/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.aremis.com/en_GB/welcome - https://excellium-services.com/cert-xlm-advisory/CVE-2022-34909 - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34909
CVE ID: CVE-2022-34910 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-05-30T16:02:13.753Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AC:H/AV:L/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.aremis.com/en_GB/welcome - https://excellium-services.com/cert-xlm-advisory/C
DP Vulnrichment: References: - https://www.aremis.com/en_GB/welcome - https://excellium-services.com/cert-xlm-advisory/CVE-2022-34910 - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-34910
CVE ID: CVE-2022-34911 State: PUBLISHED Published: 2022-07-02T00:00:00 Last Updated: 2024-08-03T09:22:10.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After account creation, when it sets the page title to "Welcome" followed by the username, the username is not escaped: SpecialCreateAccount::successfulAction() calls ::showSuccessPage() with a message as second parameter, and OutputPage::setPageTitle() uses text(). Additional Analyst Notes: - CVE Program Container: References: - https://p
, and OutputPage::setPageTitle() uses text(). Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T308471 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00027.html - https://www.debian.org/security/2022/dsa-5246 - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2022-34912 State: PUBLISHED Published: 2022-07-02T00:00:00 Last Updated: 2024-08-03T09:22:10.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Contributions, is used as page title without escaping. Hence, in a non-default configuration where a username contains HTML entities, it won't be escaped. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T308473 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/ - https://lists.fe
rg/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00027.html - https://www.debian.org/security/2022/dsa-5246 - https://security.gentoo.org/glsa/202305-24
CVE ID: CVE-2022-34913 State: PUBLISHED Published: 2022-07-02T19:28:39 Last Updated: 2024-08-03T09:22:10.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nereusx/md2roff/issues/4
CVE ID: CVE-2022-34914 State: PUBLISHED Published: 2022-07-08T18:38:49 Last Updated: 2024-08-03T09:22:10.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webswing before 22.1.3 allows X-Forwarded-For header injection. The client IP address is associated with a variable in the configuration page. The {clientIp} variable can be used as an application startup argument. The X-Forwarded-For header can be manipulated by a client to store an arbitrary value that is used to replace the clientIp variable (without sanitization). A client can thus inject multiple arguments into the session startup. Systems that do not use the clientIP variable in the configuration are not vulnerable. The
nts into the session startup. Systems that do not use the clientIP variable in the configuration are not vulnerable. The vulnerability is fixed in these versions: 20.1.16, 20.2.19, 21.1.8, 21.2.12, and 22.1.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.webswing.org/docs/20.1/faq/client_ip.html - https://www.webswing.org/blog/header-injection-vulnerability-cve-2022-34914
CVE ID: CVE-2022-34916 State: PUBLISHED Published: 2022-08-21T08:15:19 Last Updated: 2024-08-03T09:22:10.646Z Vendors: Apache Software Foundation Products: Apache Flume Problem Types: CWE-20 Description: Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java protocol or no protocol. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/FLUME-3428 - https://lists.apache.org/thread/qkmt4r2t9tbrxrdbjg1m2oczbv
erences: - https://issues.apache.org/jira/browse/FLUME-3428 - https://lists.apache.org/thread/qkmt4r2t9tbrxrdbjg1m2oczbvczd9zn
CVE ID: CVE-2022-34917 State: PUBLISHED Published: 2022-09-20T08:35:07.000Z Last Updated: 2025-05-29T13:39:10.405Z Vendors: Apache Software Foundation Products: Apache Kafka Problem Types: CWE-789 Description: A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and causing denial of service. Example scenarios: - Kafka cluster without authentication: Any clients able to establish a network connection to a broker can trigger the issue. - Kafka cluster with SASL authentication: Any clients
establish a network connection to a broker can trigger the issue. - Kafka cluster with SASL authentication: Any clients able to establish a network connection to a broker, without the need for valid SASL credentials, can trigger the issue. - Kafka cluster with TLS authentication: Only clients able to successfully authenticate via TLS can trigger the issue. We advise the users to upgrade the Kafka installations to one of the 3.2.3, 3.1.2, 3.0.2, 2.8.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kafka.apache.org/cve-list
CVE ID: CVE-2022-34918 State: PUBLISHED Published: 2022-07-04T20:07:32 Last Updated: 2024-08-03T09:22:10.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/s
netfilter/nf_tables_api.c. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=7e6bc1f6cabcd30aba0b11219d8e01b952eacbb6 - https://lore.kernel.org/netfilter-devel/cd9428b6-7ffb-dd22-d949-d86f4869f452%40randorisec.fr/T/#u - https://www.openwall.com/lists/oss-security/2022/07/02/3 - http://www.openwall.com/lists/oss-security/2022/07/05/1 - https://www.randorisec.fr/crack-linux-firewall/ - https://www.debian.org/security/2022/dsa-5191 - http://www.openwall.com/lists/oss-security/2022/08/06/5 - https://security.netapp.com/advisory/ntap-20220826-0004/ - http://packetstormsecurity.com/files/168191/Kernel-Live-Pat
- https://security.netapp.com/advisory/ntap-20220826-0004/ - http://packetstormsecurity.com/files/168191/Kernel-Live-Patch-Security-Notice-LSN-0089-1.html - http://packetstormsecurity.com/files/168543/Netfilter-nft_set_elem_init-Heap-Overflow-Privilege-Escalation.html
CVE ID: CVE-2022-34919 State: PUBLISHED Published: 2022-08-23T00:57:38 Last Updated: 2024-08-03T09:22:10.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.zengenti.com/ - https://github.com/ahajnik/CVE-2022-34919
CVE ID: CVE-2022-34924 State: PUBLISHED Published: 2022-08-02T19:06:28 Last Updated: 2024-08-03T09:22:10.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://codeantenna.com/a/DXQfemaZEH - https://developpaper.com/lanling-oa-foreground-arbitrary-file-reading-vulnerability-exploitation/
CVE ID: CVE-2022-34927 State: PUBLISHED Published: 2022-08-03T00:19:45 Last Updated: 2024-08-03T09:22:10.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/milkytracker/MilkyTracker/issues/275 - https://github.com/milkytracker/MilkyTracker/commit/3a5474f9102cbdc10fbd9e7b1b2c8d3f3f45d91b
CVE ID: CVE-2022-34928 State: PUBLISHED Published: 2022-08-03T00:26:38 Last Updated: 2024-08-03T09:22:10.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/43
CVE ID: CVE-2022-34937 State: PUBLISHED Published: 2022-08-03T00:50:03 Last Updated: 2024-08-03T09:22:10.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u5cms/u5cms/issues/51
CVE ID: CVE-2022-34943 State: REJECTED Published: 2022-08-03T01:07:52 Last Updated: 2022-08-12T15:13:07 Description: No description available.
CVE ID: CVE-2022-34945 State: PUBLISHED Published: 2022-08-02T02:54:01 Last Updated: 2024-08-03T09:22:10.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/qlf4ty
CVE ID: CVE-2022-34946 State: PUBLISHED Published: 2022-08-02T02:54:02 Last Updated: 2024-08-03T09:22:10.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/vz4009
CVE ID: CVE-2022-34947 State: PUBLISHED Published: 2022-08-02T02:54:03 Last Updated: 2024-08-03T09:22:10.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcategory.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/tcug0q
CVE ID: CVE-2022-34948 State: PUBLISHED Published: 2022-08-02T02:54:04 Last Updated: 2024-08-03T09:22:10.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbrand.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/egcp1e
CVE ID: CVE-2022-34949 State: PUBLISHED Published: 2022-08-02T02:54:05 Last Updated: 2024-08-03T09:22:10.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/gam02x
CVE ID: CVE-2022-34950 State: PUBLISHED Published: 2022-08-02T02:54:06 Last Updated: 2024-08-03T09:22:10.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/iwd521
CVE ID: CVE-2022-34951 State: PUBLISHED Published: 2022-08-02T02:54:06 Last Updated: 2024-08-03T09:22:10.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/gexe2q
CVE ID: CVE-2022-34952 State: PUBLISHED Published: 2022-08-02T02:54:07 Last Updated: 2024-08-03T09:22:10.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/wgh7s5
CVE ID: CVE-2022-34953 State: PUBLISHED Published: 2022-08-02T02:54:29 Last Updated: 2024-08-03T09:22:10.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/zd4eic
CVE ID: CVE-2022-34954 State: PUBLISHED Published: 2022-08-02T02:54:13 Last Updated: 2024-08-03T09:22:10.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/jiryu/yz4rcd/dreflr