Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-36584 State: PUBLISHED Published: 2022-09-06T16:50:08 Last Updated: 2024-08-03T10:07:34.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf. Additional Analyst Notes: - CVE Program Container: References: - https://www.tendacn.com/download/detail-3401.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-bug1.md
CVE ID: CVE-2022-36585 State: PUBLISHED Published: 2022-09-07T22:55:35 Last Updated: 2024-08-03T10:07:34.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf. Additional Analyst Notes: - CVE Program Container: References: - https://www.tendacn.com/download/detail-3401.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-0x62158.md
CVE ID: CVE-2022-36586 State: PUBLISHED Published: 2022-09-07T23:48:57 Last Updated: 2024-08-03T10:07:34.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary. Additional Analyst Notes: - CVE Program Container: References: - https://www.tendacn.com/download/detail-3401.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-%200x869f4.md
CVE ID: CVE-2022-36587 State: PUBLISHED Published: 2022-09-07T16:31:12.000Z Last Updated: 2025-06-17T19:33:26.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tendacn.com/download/detail-3401.html - https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-%200x53208.md
CVE ID: CVE-2022-36588 State: PUBLISHED Published: 2022-09-07T23:45:17 Last Updated: 2024-08-03T10:07:34.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.com/ProductInfo.aspx?m=DAP-1650 - https://github.com/Davidteeri/Bug-Report/blob/main/dlink-dap1650-0x419EF8.md
CVE ID: CVE-2022-36593 State: PUBLISHED Published: 2022-09-02T03:19:26 Last Updated: 2024-08-03T10:07:34.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kekingcn/kkFileView/issues/370
CVE ID: CVE-2022-36594 State: PUBLISHED Published: 2022-09-02T03:27:39 Last Updated: 2024-08-03T10:07:34.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/abel533/Mapper/issues/862
CVE ID: CVE-2022-36599 State: PUBLISHED Published: 2022-08-16T12:51:34 Last Updated: 2024-08-03T10:07:34.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mingSoft/MCMS/issues/I5I1P5
CVE ID: CVE-2022-36600 State: PUBLISHED Published: 2022-09-02T04:05:50 Last Updated: 2024-08-03T10:07:34.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/posts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BlogEngine/BlogEngine.NET/issues/254
CVE ID: CVE-2022-36601 State: PUBLISHED Published: 2022-09-01T19:36:14 Last Updated: 2024-08-03T10:07:34.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/
CVE ID: CVE-2022-36602 State: PUBLISHED Published: 2022-09-01T19:36:14 Last Updated: 2024-08-03T10:07:34.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: InnoSilicon A10 a10_20200924_120556 was discovered to contain a remote code execution (RCE) vulnerability in the setPlatformAPI function. Additional Analyst Notes: - CVE Program Container: References: - https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/
CVE ID: CVE-2022-36603 State: PUBLISHED Published: 2022-09-01T19:36:15 Last Updated: 2024-08-03T10:07:34.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: InnoSilicon T3T+ t2t+_soc_20190911_151433.swu was discovered to contain a remote code execution (RCE) vulnerability in the checkUrl function. Additional Analyst Notes: - CVE Program Container: References: - https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/
CVE ID: CVE-2022-36604 State: PUBLISHED Published: 2022-09-01T19:36:16 Last Updated: 2024-08-03T10:07:34.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/
CVE ID: CVE-2022-36605 State: PUBLISHED Published: 2022-08-19T14:43:06 Last Updated: 2024-08-03T10:07:34.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwebsoft/ywoa/issues/24
CVE ID: CVE-2022-36606 State: PUBLISHED Published: 2022-08-19T14:43:07 Last Updated: 2024-08-03T10:07:34.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudwebsoft/ywoa/issues/25
CVE ID: CVE-2022-36609 State: PUBLISHED Published: 2022-09-02T04:10:56 Last Updated: 2024-08-03T10:07:34.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patient.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Lendme1996/bug_report/blob/main/vendors/oretnom23/clinics-patient-management-system/SQLi-1.md
CVE ID: CVE-2022-36610 State: PUBLISHED Published: 2022-08-28T23:58:53 Last Updated: 2024-08-03T10:07:34.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_A720R/hard_code.md
CVE ID: CVE-2022-36611 State: PUBLISHED Published: 2022-08-28T23:58:54 Last Updated: 2024-08-03T10:07:34.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_A800R/hard_code.md
CVE ID: CVE-2022-36612 State: PUBLISHED Published: 2022-08-28T23:58:55 Last Updated: 2024-08-03T10:07:34.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A950RG V4.1.2cu.5204_B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_A950RG/hard_code.md
CVE ID: CVE-2022-36613 State: PUBLISHED Published: 2022-08-28T23:58:55 Last Updated: 2024-08-03T10:07:34.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_N600R/hard_code.md
CVE ID: CVE-2022-36614 State: PUBLISHED Published: 2022-08-28T23:58:56 Last Updated: 2024-08-03T10:07:34.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_A860R/hard_code.md
CVE ID: CVE-2022-36615 State: PUBLISHED Published: 2022-08-28T23:58:57 Last Updated: 2024-08-03T10:07:34.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3000RU V4.1.2cu.5185_B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_A3000RU/hard_code.md
CVE ID: CVE-2022-36616 State: PUBLISHED Published: 2022-08-28T23:58:57 Last Updated: 2024-08-03T10:07:34.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiter6666/CVE/blob/main/TOTOLINK_A810R/hard_code.md
CVE ID: CVE-2022-36617 State: PUBLISHED Published: 2022-09-09T15:33:18 Last Updated: 2024-08-03T10:07:34.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption. This issue allows attackers with administrative privileges to recover cleartext passwords. Additional Analyst Notes: - CVE Program Container: References: - https://startrekdude.github.io/arqbackup.html - https://www.arqbackup.com/download/arqbackup/arq7windows_release_notes.html
CVE ID: CVE-2022-36619 State: PUBLISHED Published: 2022-08-31T22:55:13 Last Updated: 2024-08-03T10:07:34.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/setmac/readme.md
CVE ID: CVE-2022-36620 State: PUBLISHED Published: 2022-08-31T00:00:00 Last Updated: 2024-08-03T10:07:34.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/z1r00/IOT_Vul/blob/main/dlink/Dir816/addRouting/readme.md - https://github.com/726232111/VulIoT/tree/main/D-Link/DIR-816%20A2_v1.10CNB05/addRouting
CVE ID: CVE-2022-36621 State: PUBLISHED Published: 2022-09-01T20:04:08 Last Updated: 2024-08-03T10:07:34.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://github.com/Samsung/mTower - https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/lib/libutee/tee_api_objects.c#L223
CVE ID: CVE-2022-36622 State: PUBLISHED Published: 2022-09-01T20:04:47 Last Updated: 2024-08-03T10:07:34.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://github.com/Samsung/mTower - https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/lib/libutee/tee_api_objects.c#L84 - https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tee/tee/tee_svc.c#L965
CVE ID: CVE-2022-36633 State: PUBLISHED Published: 2022-08-24T12:29:54 Last Updated: 2024-08-03T10:07:34.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack. This is fully unauthenticated attack utilizing the trusted teleport server to deliver the payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gravitational/teleport - https:/
ad. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gravitational/teleport - https://packetstormsecurity.com/files/168137/Teleport-9.3.6-Command-Injection.html - http://packetstormsecurity.com/files/168477/Teleport-10.1.1-Remote-Code-Execution.html
CVE ID: CVE-2022-36634 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:07:34.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://zkbiosecurity.com - http://zkteco.com - https://seclists.org/fulldisclosure/2022/Sep/29
CVE ID: CVE-2022-36635 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:07:34.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do. Additional Analyst Notes: - CVE Program Container: References: - http://zkbiosecurity.com - http://zkteco.com - https://medium.com/stolabs/cve-2022-36635-a-sql-injection-in-zksecuritybio-to-rce-c5bde2962d47
CVE ID: CVE-2022-36636 State: PUBLISHED Published: 2022-09-02T04:34:52 Last Updated: 2024-08-03T10:07:34.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.htm - https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0/
CVE ID: CVE-2022-36637 State: PUBLISHED Published: 2022-09-02T04:34:53 Last Updated: 2024-08-03T10:07:34.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the brand_name parameter at /brand.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.htm - https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0/
CVE ID: CVE-2022-36638 State: PUBLISHED Published: 2022-09-02T20:32:31 Last Updated: 2024-08-03T10:07:34.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders. Additional Analyst Notes: - CVE Program Container: References: - https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0/ - https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html
CVE ID: CVE-2022-36639 State: PUBLISHED Published: 2022-09-02T20:32:32 Last Updated: 2024-08-03T10:07:34.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0/ - https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html
CVE ID: CVE-2022-36640 State: PUBLISHED Published: 2022-09-02T20:50:45 Last Updated: 2024-08-03T10:07:34.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deployed on a publicly accessible endpoint, we strongly recommend authentication be enabled. Otherwise the data will be publicly available to any unauthenticated user. The default settings do NOT enable authentication and authorization. Additional Analyst Notes: - CVE Program
cated user. The default settings do NOT enable authentication and authorization. Additional Analyst Notes: - CVE Program Container: References: - http://influxdata.com - http://influxdb.com - http://www.krsecu.com/CVE/409b5310045bd6b9a984a5fb63bd8786d5c5681a8ad5b1c815c84b2b90002ad7.docx - https://dl.influxdata.com/influxdb/releases/influxdb_1.8.10_amd64.deb - https://portal.influxdata.com/downloads/ - https://www.influxdata.com/
CVE ID: CVE-2022-36642 State: PUBLISHED Published: 2022-09-02T21:23:28 Last Updated: 2024-08-03T10:07:34.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive information which can be unlatched by exploiting the LFD vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1jm9h8JNmezTt7AbHYRY7gPC4lXGDNklL - https://www.telosalliance.com
: References: - https://drive.google.com/drive/folders/1jm9h8JNmezTt7AbHYRY7gPC4lXGDNklL - https://www.telosalliance.com/radio-processing/audio-interfaces/omnia-mpx-node - https://cyber-guy.gitbook.io/cyber-guy/pocs/omnia-node-mpx-auth-bypass-via-lfd - https://www.exploit-db.com/exploits/50996 - https://cyber-guy.gitbook.io/cyber-guys-blog/blogs/bypassing-mpx-node-authentication-firmware-analysis
CVE ID: CVE-2022-36647 State: PUBLISHED Published: 2022-09-02T21:35:32 Last Updated: 2024-08-03T10:07:34.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at source/common/header.cc:269. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pkuvcl/davs2/issues/29
CVE ID: CVE-2022-36648 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:29:51.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third parties as not a valid vulnerability due to the rocker device not falling within the virtualization use case. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.nongnu.org/archiv
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.nongnu.org/archive/html/qemu-devel/2022-06/msg04469.html - https://security.netapp.com/advisory/ntap-20231006-0004/
CVE ID: CVE-2022-36657 State: PUBLISHED Published: 2022-08-30T20:57:42 Last Updated: 2024-08-03T10:07:34.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_details.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/z1pwn/bug_report/blob/main/vendors/kingbhob02/library-management-system/XSS-1.md
CVE ID: CVE-2022-36659 State: PUBLISHED Published: 2022-09-07T16:30:06.000Z Last Updated: 2025-06-17T19:30:54.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://awxylitol.github.io/2022/07/21/disclose-three-bugs-in-xhyve.html
CVE ID: CVE-2022-36660 State: PUBLISHED Published: 2022-09-07T16:30:07.000Z Last Updated: 2025-06-17T19:31:27.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://awxylitol.github.io/2022/07/21/disclose-three-bugs-in-xhyve.html
CVE ID: CVE-2022-36661 State: PUBLISHED Published: 2022-09-07T16:30:08.000Z Last Updated: 2025-06-17T19:31:54.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://awxylitol.github.io/2022/07/21/disclose-three-bugs-in-xhyve.html
CVE ID: CVE-2022-36663 State: PUBLISHED Published: 2022-09-06T20:44:17 Last Updated: 2024-08-03T10:07:34.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GluuFederation/oxAuth/releases/tag/4.4.1 - https://gluu.org/gluu-4-4-1/
CVE ID: CVE-2022-36664 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T14:51:07.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://passwordmanager.adiscon.com/en/manual/ - https://packetstormsecurity.com/files/168599/Password-Manager-For-IIS-2.0-Cross-Site-Scripting.html