Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28935 State: PUBLISHED Published: 2022-07-06T12:24:38 Last Updated: 2024-08-03T06:10:57.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1JNX74lNgC3U9pnrcNlGo0hsDGZzF6h7F?usp=sharing - https://drive.google.com/drive/folders/1JNX74lNgC3U9pnrcNlGo0hsDGZzF6h7F
CVE ID: CVE-2022-28936 State: PUBLISHED Published: 2022-05-15T15:39:47 Last Updated: 2024-08-03T06:10:56.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node can trigger an integer overflow and cause a Denial of Service (DoS) via an unusually large viewchange message packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2307
CVE ID: CVE-2022-28937 State: PUBLISHED Published: 2022-05-15T15:39:48 Last Updated: 2024-08-03T06:10:58.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an invalid proposal with an invalid header, will cause normal nodes to stop producing new blocks and processing new clients' requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2312
CVE ID: CVE-2022-28940 State: PUBLISHED Published: 2022-05-04T15:40:06 Last Updated: 2024-08-03T06:10:57.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization. It sends a large amount of data through ajaxmsg to carry out DOS attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhefox/0day/blob/main/%E6%96%B0%E5%8D%8E%E4%B8%89magicR100%E5%AD%98%E5%9C%A8DOS%E6%94%BB%E5%87%BB%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90.md
CVE ID: CVE-2022-28944 State: PUBLISHED Published: 2022-05-23T17:05:09 Last Updated: 2024-08-03T06:10:58.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain EMCO Software products are affected by: CWE-494: Download of Code Without Integrity Check. This affects MSI Package Builder for Windows 9.1.4 and Remote Installer for Windows 6.0.13 and Ping Monitor for Windows 8.0.18 and Remote Shutdown for Windows 7.2.2 and WakeOnLan 2.0.8 and Network Inventory for Windows 5.8.22 and Network Software Scanner for Windows 2.0.8 and UnLock IT for Windows 6.1.1. The impact is: execute arbitrary code (remote). The component is: Updater. The attack vector is: To exploit this vulnerability
pact is: execute arbitrary code (remote). The component is: Updater. The attack vector is: To exploit this vulnerability, a user must trigger an update of an affected installation of EMCO Software. ¶¶ Multiple products from EMCO Software are affected by a remote code execution vulnerability during the update process. Additional Analyst Notes: - CVE Program Container: References: - http://msi.com - http://emco.com - https://github.com/gerr-re/cve-2022-28944/blob/main/cve-2022-28944_public-advisory.pdf
CVE ID: CVE-2022-28945 State: PUBLISHED Published: 2022-05-31T23:22:54 Last Updated: 2024-08-03T06:10:57.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - http://webbank.com - http://wecube.com - https://github.com/WeBankPartners/wecube-platform/releases/tag/v3.2.2 - https://github.com/WeBankPartners/wecube-platform/issues/2324
CVE ID: CVE-2022-28946 State: PUBLISHED Published: 2022-05-19T18:03:47 Last Updated: 2024-08-03T06:10:57.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/open-policy-agent/opa/commit/e9d3828db670cbe11129885f37f08cbf04935264
CVE ID: CVE-2022-28948 State: PUBLISHED Published: 2022-05-19T19:59:30 Last Updated: 2024-08-03T06:10:57.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-yaml/yaml/issues/666 - https://security.netapp.com/advisory/ntap-20220923-0006/
CVE ID: CVE-2022-28955 State: PUBLISHED Published: 2022-05-18T11:50:41 Last Updated: 2024-08-03T06:10:57.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/shijin0925/IOT/blob/master/DIR816/1.md
CVE ID: CVE-2022-28956 State: PUBLISHED Published: 2022-05-18T11:50:42 Last Updated: 2024-08-03T06:10:57.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/shijin0925/IOT/blob/master/DIR816/4.md
CVE ID: CVE-2022-28958 State: REJECTED Published: N/A Last Updated: 2023-11-29T20:51:12.152436 Description: No description available.
CVE ID: CVE-2022-28959 State: PUBLISHED Published: 2022-05-19T20:26:11 Last Updated: 2024-08-03T06:10:57.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://thinkloveshare.com/en/hacking/rce_on_spip_and_root_me/ - https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-SPIP-3-2-8-et-SPIP-3-1-13.html - https://www.root-me.org/fr/Informations/Faiblesses-decouvertes/ - https://github.com/spip/SPIP/commit/0394b44774555ae8331b6e65e35065dfa
t-me.org/fr/Informations/Faiblesses-decouvertes/ - https://github.com/spip/SPIP/commit/0394b44774555ae8331b6e65e35065dfa0bb41e4 - https://github.com/spip/SPIP/commit/6c1650713fc948318852ace759aab8f1a84791cf
CVE ID: CVE-2022-28960 State: PUBLISHED Published: 2022-05-19T20:26:14 Last Updated: 2024-08-03T06:10:57.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parameter at /ecrire. Additional Analyst Notes: - CVE Program Container: References: - https://thinkloveshare.com/en/hacking/rce_on_spip_and_root_me/ - https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-SPIP-3-2-8-et-SPIP-3-1-13.html - https://www.root-me.org/fr/Informations/Faiblesses-decouvertes/ - https://github.com/spip/SPIP/commit/0394b44774555ae8331b6e65e35065dfa0bb41e4 - https://github.com/spip/SPIP/comm
rtes/ - https://github.com/spip/SPIP/commit/0394b44774555ae8331b6e65e35065dfa0bb41e4 - https://github.com/spip/SPIP/commit/6c1650713fc948318852ace759aab8f1a84791cf
CVE ID: CVE-2022-28961 State: PUBLISHED Published: 2022-05-19T20:26:16 Last Updated: 2024-08-03T06:10:57.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the lier_trad and where parameters. Additional Analyst Notes: - CVE Program Container: References: - https://thinkloveshare.com/en/hacking/rce_on_spip_and_root_me/ - https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-SPIP-3-2-8-et-SPIP-3-1-13.html - https://www.root-me.org/fr/Informations/Faiblesses-decouvertes/ - https://github.com/spip/SPIP/commit/0394b44774555ae8331b6e65e35065dfa0bb41e4 - https://github.
Faiblesses-decouvertes/ - https://github.com/spip/SPIP/commit/0394b44774555ae8331b6e65e35065dfa0bb41e4 - https://github.com/spip/SPIP/commit/6c1650713fc948318852ace759aab8f1a84791cf
CVE ID: CVE-2022-28962 State: PUBLISHED Published: 2022-05-19T20:40:19 Last Updated: 2024-08-03T06:10:57.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166598/Online-Sports-Complex-Booking-System-1.0-SQL-Injection.html - https://github.com/playZG/Exploit-/blob/main/Online%20Sports%20Complex%20Booking%20System/Online%20Sports%20Complex%20Booking%20System%201.0%20SQL%20Injection%28%E4%BA%8C%29.md
CVE ID: CVE-2022-28964 State: PUBLISHED Published: 2022-05-20T01:13:35 Last Updated: 2024-08-03T06:10:57.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) via a crafted DLL file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2022-AVAST1 - https://forum.avast.com/index.php?topic=317641.0
CVE ID: CVE-2022-28965 State: PUBLISHED Published: 2022-05-20T01:13:39 Last Updated: 2024-08-03T06:10:58.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted DLL file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2022-AVAST2 - https://forum.avast.com/index.php?topic=318305.0
CVE ID: CVE-2022-28966 State: PUBLISHED Published: 2022-04-16T15:52:37 Last Updated: 2024-08-03T06:10:57.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wasm3/wasm3/issues/320
CVE ID: CVE-2022-28969 State: PUBLISHED Published: 2022-05-06T13:08:38 Last Updated: 2024-08-03T06:10:57.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. This vulnerability allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Tenda/AX1806/fromSetWifiGusetBasic
CVE ID: CVE-2022-28970 State: PUBLISHED Published: 2022-05-06T13:08:39 Last Updated: 2024-08-03T06:10:58.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/blob/main/Tenda/AX1806/GetParentControlInfo/readme.md
CVE ID: CVE-2022-28971 State: PUBLISHED Published: 2022-05-06T13:08:40 Last Updated: 2024-08-03T06:10:58.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/blob/main/Tenda/AX1806/fromSetIpMacBind/readme.md
CVE ID: CVE-2022-28972 State: PUBLISHED Published: 2022-05-06T13:08:41 Last Updated: 2024-08-03T06:10:57.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/blob/main/Tenda/AX1806/form_fast_setting_wifi_set/readme.md
CVE ID: CVE-2022-28973 State: PUBLISHED Published: 2022-05-06T13:08:42 Last Updated: 2024-08-03T06:10:57.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the function fromAdvSetMacMtuWan. This vulnerability allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/blob/main/Tenda/AX1806/fromAdvSetMacMtuWan/readme.md
CVE ID: CVE-2022-28975 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-06-18T16:55:58.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://infoblox.com - https://piotrryciak.com/posts/xss-infoblox/
CVE ID: CVE-2022-28977 State: PUBLISHED Published: 2022-09-22T00:02:08.000Z Last Updated: 2025-05-27T16:00:50.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 fix pack 91 through 101, 7.1 fix pack 17 through 25, 7.2 fix pack 5 through 14, and 7.3 before service pack 3 can be circumvented by using multiple forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
ters that rely on HtmlUtil.escapeRedirect. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28977-htmlutil.escaperedirect-circumvention-with-multiple-forward-slash
CVE ID: CVE-2022-28978 State: PUBLISHED Published: 2022-09-21T23:38:59.000Z Last Updated: 2025-05-27T18:52:38.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross-site scripting (XSS) vulnerability in the Site module's user membership administration page in Liferay Portal 7.0.1 through 7.4.1, and Liferay DXP 7.0 before fix pack 102, 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the a user's name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/
ADP Vulnrichment: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28978-stored-xss-with-user-name-in-site-membership
CVE ID: CVE-2022-28979 State: PUBLISHED Published: 2022-09-21T23:22:44.000Z Last Updated: 2025-05-27T20:00:17.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liferay Portal v7.1.0 through v7.4.2 and Liferay DXP 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 was discovered to contain a cross-site scripting (XSS) vulnerability in the Portal Search module's Custom Facet widget. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Parameter Name text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://porta
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28979-xss-in-custom-facet-widget - https://issues.liferay.com/browse/LPE-17381
CVE ID: CVE-2022-28980 State: PUBLISHED Published: 2022-09-22T00:13:41.000Z Last Updated: 2025-05-27T17:48:38.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal v7.4.3.4 and Liferay DXP v7.4 GA allows attackers to execute arbitrary web scripts or HTML via parameters with the filter_ prefix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28980-reflected-xss-with-filter_%2A-parameters-in-applied-fragment-filters
CVE ID: CVE-2022-28981 State: PUBLISHED Published: 2022-09-22T00:06:35.000Z Last Updated: 2025-05-27T17:49:21.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28981-path-traversal-vulnerability-in-hypermedia-rest-apis
CVE ID: CVE-2022-28982 State: PUBLISHED Published: 2022-09-21T23:57:41.000Z Last Updated: 2025-05-27T18:13:18.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name of a tag. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28982-reflected-xss-with-tag-name-in-%253Cliferay-asset-asset-ta
ilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28982-reflected-xss-with-tag-name-in-%253Cliferay-asset-asset-tags-selector%253E
CVE ID: CVE-2022-28985 State: PUBLISHED Published: 2022-05-20T01:43:10 Last Updated: 2024-08-03T06:10:59.208Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/orangehrm/orangehrm/issues/1217
CVE ID: CVE-2022-28986 State: PUBLISHED Published: 2022-05-10T18:51:15 Last Updated: 2024-08-03T06:10:58.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://simple.com - http://lms.com - https://github.com/FlaviuPopescu/CVE-2022-28986
CVE ID: CVE-2022-28987 State: PUBLISHED Published: 2022-05-20T02:10:39 Last Updated: 2024-08-03T06:10:58.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/adselfservice-userenum.md - https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/adselfservice-userenum.py - https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-28987.
ne-apps/adselfservice-userenum.py - https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-28987.html
CVE ID: CVE-2022-28990 State: PUBLISHED Published: 2022-05-20T18:06:27 Last Updated: 2024-08-03T06:10:58.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wasm3/wasm3/issues/323 - https://github.com/wasm3/wasm3/pull/324
CVE ID: CVE-2022-28991 State: PUBLISHED Published: 2022-05-20T12:53:14 Last Updated: 2024-08-03T06:10:57.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to access sensitive files. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166590/Multi-Store-Inventory-Management-System-1.0-Information-Disclosure.html
CVE ID: CVE-2022-28992 State: PUBLISHED Published: 2022-05-20T12:53:16 Last Updated: 2024-08-03T06:10:58.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166587/Online-Banquet-Booking-System-1.0-Cross-Site-Request-Forgery.html
CVE ID: CVE-2022-28993 State: PUBLISHED Published: 2022-05-20T12:53:17 Last Updated: 2024-08-03T06:10:58.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166591/Multi-Store-Inventory-Management-System-1.0-Account-Takeover.html
CVE ID: CVE-2022-28994 State: PUBLISHED Published: 2022-04-29T16:17:27 Last Updated: 2024-08-03T06:10:58.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166622/Small-HTTP-Server-3.06-Remote-Buffer-Overflow.html
CVE ID: CVE-2022-28995 State: PUBLISHED Published: 2022-05-20T18:31:32 Last Updated: 2024-08-03T06:10:58.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zongdeiqianxing/rengine/issues/1