Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-47635 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T17:50:27.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wildix.atlassian.net/wiki/spaces/DOC/pages/30279136/Changelogs
CVE ID: CVE-2022-47636 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-10T14:35:52.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file (OutSystems Modeling Language), the application will load the following DLLs from the same directory av_libGLESv2.dll, libcef.DLL, user32.dll, and d3d10warp.dll. Using a crafted DLL, it is possible to execute arbitrary code in the context of the current logged in user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51678 - http://packetstormsecurity.com/files/174127/OutSystems-Service-Studio-11.53.30-DLL-Hijacking.html
CVE ID: CVE-2022-47637 State: PUBLISHED Published: 2023-09-12T00:00:00 Last Updated: 2024-09-26T15:17:41.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory. Common use cases execute files under C:\xampp with administrative privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shinnai.altervista.org/exploits/DVRT-2023-0001_CVE-2022-47637.pdf
CVE ID: CVE-2022-47648 State: PUBLISHED Published: 2023-02-08T00:00:00.000Z Last Updated: 2025-07-23T20:45:00.000Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Bosch Products: B420 Problem Types: CWE-284 Description: An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an insider attacker can gain access to the same panel without requiring any sort of authorization. The B420 module was already obsolete at the time this vuln
o the same panel without requiring any sort of authorization. The B420 module was already obsolete at the time this vulnerability was found (The End of Life announcement was made in 2013). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-341298-BT.html - https://pastebin.com/raw/0CGTpiEn - https://drive.google.com/drive/folders/16jvVFyp9RlHvXvq7qbOCjCs1jiAPT3i_?usp=sharing
CVE ID: CVE-2022-47653 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:31:22.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3_update_channels function of media_tools/av_parsers.c:9113 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2349
CVE ID: CVE-2022-47654 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:29:36.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8261 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2350
CVE ID: CVE-2022-47655 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:28:32.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short> Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/367 - https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2022-47656 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-09T20:45:58.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8273 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2353
CVE ID: CVE-2022-47657 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:27:30.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2355 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47658 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:26:19.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gf_hevc_read_vps_bs_internal of media_tools/av_parsers.c:8039 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2356
CVE ID: CVE-2022-47659 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:25:23.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2354 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47660 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:24:26.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2357 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47661 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:23:19.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via media_tools/av_parsers.c:4988 in gf_media_nalu_add_emulation_bytes Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2358 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47662 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:22:19.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite recursion in Media_GetSample isomedia/media.c:662 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2359 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47663 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:21:18.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmx_process filters/reframe_h263.c:609 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2360 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2022-47664 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T16:30:37.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/368
CVE ID: CVE-2022-47665 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T16:32:07.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/369
CVE ID: CVE-2022-47673 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:10:11.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29876
CVE ID: CVE-2022-47695 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:33:13.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29846
CVE ID: CVE-2022-47696 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:28:36.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=29677
CVE ID: CVE-2022-47697 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:20:10.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/unauth_account_takeover
CVE ID: CVE-2022-47698 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:15:46.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/stored_XSS
CVE ID: CVE-2022-47699 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T14:55:35.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/password_pol_bypass.md
CVE ID: CVE-2022-47700 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T15:02:31.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/auth_bypass.md
CVE ID: CVE-2022-47701 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T14:57:23.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/SSID_RXXS
CVE ID: CVE-2022-47703 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T17:41:44.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0_LCD_20200513. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OlivierLaflamme/cve/blob/main/TIANJIE/CPE906-3/unauth_password_disclosure.md
CVE ID: CVE-2022-47714 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:46:42.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Last Yard 22.09.8-1 does not enforce HSTS headers Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l00neyhacker/CVE-2022-47714
CVE ID: CVE-2022-47715 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:45:58.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l00neyhacker/CVE-2022-47715
CVE ID: CVE-2022-47717 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:33:13.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l00neyhacker/CVE-2022-47717
CVE ID: CVE-2022-47732 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:46:39.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yeastar.com/n-series-analog-phone-system/ - https://www.swascan.com/s
- CISA ADP Vulnrichment: References: - https://www.yeastar.com/n-series-analog-phone-system/ - https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/
CVE ID: CVE-2022-47740 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-04T14:06:58.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/blockomat2100/PoCs/blob/main/seltmann_gmbh_cms.md
CVE ID: CVE-2022-47745 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-04T14:05:04.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l3s10n/ZenTaoPMS_SqlInjection - https://github.com/easysoft/zentaopms/issues/106
CVE ID: CVE-2022-47747 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:45:41.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: kraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/uber/kraken/issues/333
CVE ID: CVE-2022-47757 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-03T18:49:28.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: In imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application to write a file into the application's data directory. This may allow an attacker to save a shared library under a special directory which the app uses to dynamically load modules. Loading the library can lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ch0pin/security-advisories/security/advisories/GHSA-ghf9-x3
r: - CISA ADP Vulnrichment: References: - https://github.com/Ch0pin/security-advisories/security/advisories/GHSA-ghf9-x3c5-3mwj
CVE ID: CVE-2022-47758 State: PUBLISHED Published: 2023-04-27T00:00:00.000Z Last Updated: 2025-01-31T19:09:01.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nanoleaf.com - https://pwning.tech/cve-2022-47758 - https://pwning.tech/cve-2022-47758/
CVE ID: CVE-2022-47762 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:31:48.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flipped-aurora/gin-vue-admin/issues/1309
CVE ID: CVE-2022-47766 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T13:29:59.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PopojiCMS/PopojiCMS/issues/35
CVE ID: CVE-2022-47767 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:09:14.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 (included). This does not exist in SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300, 1200, 2000, SL 50 Gateway / fixed in 5.1.2 / 6.0.0 for SL Base. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.swascan.com/security-advisory-solar-log/ - https://www.solar-lo
iner: - CISA ADP Vulnrichment: References: - https://www.swascan.com/security-advisory-solar-log/ - https://www.solar-log.com/en/support/firmware-database-1
CVE ID: CVE-2022-47768 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:27:47.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://serenissima.com - https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/
CVE ID: CVE-2022-47769 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T16:09:07.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root of the application to gain access to the server via the web shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://serenissima.com - https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/
CVE ID: CVE-2022-47770 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T15:14:22.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://serenissima.com - https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/
CVE ID: CVE-2022-47780 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T14:59:57.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Bangresto
CVE ID: CVE-2022-47790 State: PUBLISHED Published: 2023-01-09T00:00:00.000Z Last Updated: 2025-04-09T14:13:06.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xtxxueyan/bug_report/blob/main/vendors/onetnom23/dynamic-transaction-queuing-system/SQLi-1.md
CVE ID: CVE-2022-47848 State: PUBLISHED Published: 2023-09-15T00:00:00 Last Updated: 2024-09-25T18:19:13.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://00xbyte.github.io/posts/bezeq-router-auth-bypass/
CVE ID: CVE-2022-47853 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T18:02:37.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Am1ngl/ttt/tree/main/16
CVE ID: CVE-2022-47854 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T17:22:52.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mkucej/i-librarian/issues/155 - https://github.com/mkucej/i-librarian/issues/155#issue-1501906608