Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22810 State: PUBLISHED Published: 2022-02-09T22:05:07 Last Updated: 2024-08-03T03:21:49.158Z Vendors: n/a Products: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) Problem Types: CWE-307 Description: A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-e
lerLYnk (V2.6.2 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04
CVE ID: CVE-2022-22811 State: PUBLISHED Published: 2022-02-09T22:05:08 Last Updated: 2024-08-03T03:21:49.197Z Vendors: n/a Products: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) Problem Types: CWE-352 Description: A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions, leading to the override of the system�s configurations when an attacker persuades a user to visit a rogue website. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) Additional Analyst Notes: - CVE Program Container
(formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04
CVE ID: CVE-2022-22812 State: PUBLISHED Published: 2022-02-09T22:05:09 Last Updated: 2024-08-03T03:21:49.155Z Vendors: n/a Products: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) Problem Types: CWE-79 Description: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) Additional Analyst Not
2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-04
CVE ID: CVE-2022-22813 State: PUBLISHED Published: 2022-02-09T22:05:06 Last Updated: 2024-08-03T03:21:49.157Z Vendors: n/a Products: Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions) Problem Types: CWE-798 Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the TLS cryptographic key and take active control of the Courier tunneling communication network, they could potentially observe and manipulate traffic associated with product configuration. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-03
CVE ID: CVE-2022-22814 State: PUBLISHED Published: 2022-03-10T15:17:13 Last Updated: 2024-08-03T03:21:49.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System Diagnosis service of MyASUS before 3.1.2.0 allows privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/
CVE ID: CVE-2022-22815 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-08-03T03:21:49.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. Additional Analyst Notes: - CVE Program Container: References: - https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-imagepath-path-array-handling - https://github.com/python-pillow/Pillow/blob/c5d9223a8b5e9295d15b5a9b1ef1dae44c8499f3/src/path.c#L331 - https://lists.debian.org/debian-lts-announce/2022/01/msg00018.html - https://www.debian.org/security/2022/dsa-5053 - https://security.gentoo.org/glsa/202211-10
CVE ID: CVE-2022-22816 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-08-03T03:21:49.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. Additional Analyst Notes: - CVE Program Container: References: - https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fixed-imagepath-path-array-handling - https://github.com/python-pillow/Pillow/blob/c5d9223a8b5e9295d15b5a9b1ef1dae44c8499f3/src/path.c#L331 - https://lists.debian.org/debian-lts-announce/2022/01/msg00018.html - https://www.debian.org/security/2022/dsa-5053 - https://security.gentoo.org/glsa/
n-lts-announce/2022/01/msg00018.html - https://www.debian.org/security/2022/dsa-5053 - https://security.gentoo.org/glsa/202211-10
CVE ID: CVE-2022-22817 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-10-15T20:26:11.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#restrict-builtins-available-to-imagemath-eval - https://lists.debian.org/debian-lts-announce/2022/01/msg00018.html - https://www.debian.org/security/2022/dsa-5053 - https://pillow.readthedocs.io/en/stable/
nnounce/2022/01/msg00018.html - https://www.debian.org/security/2022/dsa-5053 - https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html#security - https://security.gentoo.org/glsa/202211-10 - https://lists.debian.org/debian-lts-announce/2024/03/msg00021.html
CVE ID: CVE-2022-22818 State: PUBLISHED Published: 2022-02-03T00:00:00 Last Updated: 2024-08-03T03:21:49.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/django-announce - https://docs.djangoproject.com/en/4.0/releases/security/ - https://www.djangoproject.com/weblog/2022/feb/01/security-releases/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2
eases/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/ - https://security.netapp.com/advisory/ntap-20220221-0003/ - https://www.debian.org/security/2022/dsa-5254
CVE ID: CVE-2022-22819 State: PUBLISHED Published: 2022-03-23T21:13:46 Last Updated: 2024-08-03T03:21:49.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a buffer overflow in parsing SB2 updates before the signature is verified. This can allow an attacker to achieve non-persistent code execution via a crafted unsigned update. Additional Analyst Notes: - CVE Program Container: References: - https://www.nxp.com - https://oxide.computer/blog/another-vulnerability-in-the-lpc55s69-rom
CVE ID: CVE-2022-22820 State: PUBLISHED Published: 2022-01-20T11:47:43 Last Updated: 2024-08-03T03:21:49.159Z Vendors: LINE Corporation Products: LINE for Windows Problem Types: n/a Description: Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1357400
CVE ID: CVE-2022-22821 State: PUBLISHED Published: 2022-01-08T02:35:18 Last Updated: 2024-08-03T03:21:49.148Z Severity: LOW (CVSS 2 CVSS:3.1/AC:L/AV:L/A:N/C:N/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NVIDIA/NeMo/security/advisories/GHSA-rpx7-33j2-xx9x
CVE ID: CVE-2022-22822 State: PUBLISHED Published: 2022-01-08T02:57:15.000Z Last Updated: 2025-05-05T16:29:41.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/539 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://www.tenable.com/security/tns-2022-05 - https://www.debian.org/security/2022/dsa-5073 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-22823 State: PUBLISHED Published: 2022-01-08T02:57:07.000Z Last Updated: 2025-05-05T16:29:31.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/539 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://www.tenable.com/security/tns-2022-05 - https://www.debian.org/security/2022/dsa-5073 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-22824 State: PUBLISHED Published: 2022-01-08T02:56:58.000Z Last Updated: 2025-05-05T16:29:22.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/539 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://www.tenable.com/security/tns-2022-05 - https://www.debian.org/security/2022/dsa-5073 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-22825 State: PUBLISHED Published: 2022-01-08T02:56:48.000Z Last Updated: 2025-05-05T16:29:13.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/539 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://www.tenable.com/security/tns-2022-05 - https://www.debian.org/security/2022/dsa-5073 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-22826 State: PUBLISHED Published: 2022-01-08T02:56:39.000Z Last Updated: 2025-05-05T16:29:03.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/539 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://www.tenable.com/security/tns-2022-05 - https://www.debian.org/security/2022/dsa-5073 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-22827 State: PUBLISHED Published: 2022-01-08T02:56:30.000Z Last Updated: 2025-05-05T16:28:54.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/539 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://www.tenable.com/security/tns-2022-05 - https://www.debian.org/security/2022/dsa-5073 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-22828 State: PUBLISHED Published: 2022-01-27T05:41:02 Last Updated: 2024-08-03T03:28:42.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string. Additional Analyst Notes: - CVE Program Container: References: - https://web.synametrics.com/SynamanVersionHistory.htm - https://github.com/videnlabs/CVE-2022-22828/
CVE ID: CVE-2022-22831 State: PUBLISHED Published: 2022-02-06T20:53:50 Last Updated: 2024-08-03T03:28:42.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentest.com.tr/exploits/Servisnet-Tessa-Add-sysAdmin-User-Unauthenticated.html - http://www.servisnet.com.tr/en/page/products - http://packetstormsecurity.com/files/165863/Servisnet-Tessa-Authentication-Bypass.html - https://www.exploit-db.com/exploits/50714
CVE ID: CVE-2022-22832 State: PUBLISHED Published: 2022-02-06T20:54:53 Last Updated: 2024-08-03T03:28:42.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request. Additional Analyst Notes: - CVE Program Container: References: - http://www.servisnet.com.tr/en/page/products - https://www.pentest.com.tr/exploits/Servisnet-Tessa-Privilege-Escalation.html - http://packetstormsecurity.com/files/165873/Servisnet-Tessa-Privilege-Escalation.html - https://www.exploit-db.com/exploits/50712
CVE ID: CVE-2022-22833 State: PUBLISHED Published: 2022-02-06T21:11:02 Last Updated: 2024-08-03T03:28:42.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request. Additional Analyst Notes: - CVE Program Container: References: - http://www.servisnet.com.tr/en/page/products - https://pentest.com.tr/exploits/Servisnet-Tessa-MQTT-Credentials-Dump-Unauthenticated.html - http://packetstormsecurity.com/files/165867/Servisnet-Tessa-MQTT-Credential-Disclosure.html - https://www.exploit-db.com/exploits/50713
CVE ID: CVE-2022-22834 State: PUBLISHED Published: 2022-03-07T20:52:17 Last Updated: 2024-09-18T18:38:54.104703 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://overit.us/products/geocall/ - https://labs.yarix.com/advisories/cve-2022-22834/ - https://labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835/ - https://www.overit.ai/p
/labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835/ - https://www.overit.ai/product/nextgen-fsm/
CVE ID: CVE-2022-22835 State: PUBLISHED Published: 2022-03-07T20:48:20 Last Updated: 2024-09-18T18:40:17.061661 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XXE vulnerability to read arbitrary files from the filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://overit.us/products/geocall/ - https://labs.yarix.com/advisories/cve-2022-22835/ - https://labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835/ - https://www.overit.ai/product/nextgen-fsm/
CVE ID: CVE-2022-22836 State: PUBLISHED Published: 2022-01-08T22:30:11 Last Updated: 2024-08-03T03:28:42.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request. Additional Analyst Notes: - CVE Program Container: References: - https://yoursecuritybores.me/coreftp-vulnerabilities/ - http://www.coreftp.com/forums/viewtopic.php?f=15&t=4022509
CVE ID: CVE-2022-22844 State: PUBLISHED Published: 2022-01-08T00:00:00 Last Updated: 2024-08-03T03:28:42.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/libtiff/libtiff/-/issues/355 - https://gitlab.com/libtiff/libtiff/-/merge_requests/287 - https://lists.debian.org/debian-lts-announce/2022/03/msg00001.html - https://security.netapp.com/advisory/ntap-20220311-0002/ - https://www.debian.org/security/2022/dsa-5108 - https://security.gent
security.netapp.com/advisory/ntap-20220311-0002/ - https://www.debian.org/security/2022/dsa-5108 - https://security.gentoo.org/glsa/202210-10
CVE ID: CVE-2022-22845 State: PUBLISHED Published: 2022-01-09T15:03:39 Last Updated: 2024-08-03T03:28:42.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations. Additional Analyst Notes: - CVE Program Container: References: - http://sipcapture.org - https://github.com/sipcapture/homer - https://github.com/sipcapture/homer-app/commit/7f92f3afc8b0380c14af3d0fc1c365318a2d1591 - https://github.com/sipcapture/homer-app/compare/1.4.27...1.4.28
CVE ID: CVE-2022-22846 State: PUBLISHED Published: 2022-01-09T00:49:30 Last Updated: 2024-08-03T03:28:42.473Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paulc/dnslib/issues/30
CVE ID: CVE-2022-22847 State: PUBLISHED Published: 2022-01-10T06:02:23 Last Updated: 2024-08-03T03:28:42.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services (either by an authenticated attacker, or in a configuration that does not require authentication). Additional Analyst Notes: - CVE Program Container: References: - https://support.formpipe.com/news/posts/vulnerability-in-the-client-web-service-of-lasernet-9-and-older
CVE ID: CVE-2022-22850 State: PUBLISHED Published: 2022-01-26T18:31:00 Last Updated: 2024-08-03T03:28:42.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in room_types. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html - https://github.com/Sant268/CVE-2022-22850/blob/main/CVE-2022-22850.md
CVE ID: CVE-2022-22851 State: PUBLISHED Published: 2022-01-26T15:58:58 Last Updated: 2024-08-03T03:28:42.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the specialization parameter in doctors.php Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html - https://github.com/Sant268/CVE-2022-22851/commit/17381378bdb7c9f7b3326af6fb79cf68ca9f9d3d
CVE ID: CVE-2022-22852 State: PUBLISHED Published: 2022-01-26T19:07:18 Last Updated: 2024-08-03T03:28:42.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in room_list. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html - https://github.com/Sant268/CVE-2022-22852/blob/main/CVE-2022-22852.md
CVE ID: CVE-2022-22853 State: PUBLISHED Published: 2022-02-16T17:12:41 Last Updated: 2024-08-03T03:28:42.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Name field. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/hprms_0.zip - https://github.com/Dheeraj-Deshmukh/stored-xss-in-Hospital-
ter.com/sites/default/files/download/oretnom23/hprms_0.zip - https://github.com/Dheeraj-Deshmukh/stored-xss-in-Hospital-s-Patient-Records-Management-System
CVE ID: CVE-2022-22854 State: PUBLISHED Published: 2022-02-14T17:11:14 Last Updated: 2024-08-03T03:28:42.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dheeraj-Deshmukh/Hospital-s-patient-management-system
CVE ID: CVE-2022-22868 State: PUBLISHED Published: 2022-01-28T18:10:42 Last Updated: 2024-08-03T03:28:42.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting (XSS) vulnerability, that allows attackers to inject arbitrary script via name parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/truonghuuphuc/CVE - https://github.com/GibbonEdu/core/issues/1594 - https://github.com/truonghuuphuc/CVE/blob/main/CVE-2022-22868.pdf
CVE ID: CVE-2022-22880 State: PUBLISHED Published: 2022-02-16T21:42:08 Last Updated: 2024-08-03T03:28:42.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jeecgboot/jeecg-boot/issues/3347
CVE ID: CVE-2022-22881 State: PUBLISHED Published: 2022-02-16T21:42:08 Last Updated: 2024-08-03T03:28:42.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jeecgboot/jeecg-boot/issues/3348