Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2992 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-14T14:27:30.020Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of special elements used in a command ('command injection') in GitLab Description: A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/371
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/371884 - https://hackerone.com/reports/1679624 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json - http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html
CVE ID: CVE-2022-2993 State: PUBLISHED Published: 2022-12-12T01:50:00.293Z Last Updated: 2025-04-22T18:04:39.889Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: n/a Description: There is an error in the condition of the last if-statement in the function smp_check_keys. It was rejecting current keys if all requirements were unmet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3286-jgjx-8cvr
CVE ID: CVE-2022-2995 State: PUBLISHED Published: 2022-09-19T19:53:23.000Z Last Updated: 2025-05-29T15:57:51.706Z Vendors: n/a Products: cri-o Problem Types: CWE-284 Description: Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigati
ment: References: - https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/ - https://github.com/cri-o/cri-o/pull/6159
CVE ID: CVE-2022-2996 State: PUBLISHED Published: 2022-09-01T00:00:00 Last Updated: 2024-08-03T00:52:59.945Z Vendors: n/a Products: python-scciclient Problem Types: CWE-295 Description: A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up the connection to possible Man-in-the-middle (MITM) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://opendev.org/x/python-scciclient/commit/274dca0344b65b4ac113d3271d21c17e970a636c - https://lists.debian.org/debian-lts-announce/2022/11/msg00006.html
CVE ID: CVE-2022-2997 State: PUBLISHED Published: 2022-08-25T20:30:17 Last Updated: 2024-08-03T00:53:00.860Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: snipe Products: snipe/snipe-it Problem Types: CWE-384 Description: Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c09bf21b-50d2-49f0-8c92-49f6b3c358d8 - https://github.com/snipe/snipe-it/commit/6fde72a69335c80079363b7d26aa94e7f67400e1
CVE ID: CVE-2022-2998 State: PUBLISHED Published: 2022-09-26T15:01:18.000Z Last Updated: 2025-05-21T19:05:17.361Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html - https://crbug.com/1329794
CVE ID: CVE-2022-30000 State: PUBLISHED Published: 2022-05-12T15:16:01 Last Updated: 2024-08-03T06:40:47.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?recipt_no=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-4.md
CVE ID: CVE-2022-30001 State: PUBLISHED Published: 2022-05-12T15:14:54 Last Updated: 2024-08-03T06:40:47.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agent_id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-3.md
CVE ID: CVE-2022-30002 State: PUBLISHED Published: 2022-05-12T15:13:44 Last Updated: 2024-08-03T06:40:47.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-5.md
CVE ID: CVE-2022-30003 State: PUBLISHED Published: 2022-09-26T18:27:33.000Z Last Updated: 2025-05-21T15:12:33.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html - https://packetstormsecurity.com/files/168250/omps10-xss.txt
CVE ID: CVE-2022-30004 State: PUBLISHED Published: 2022-09-26T19:16:39.000Z Last Updated: 2025-05-21T18:33:44.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html - https://packetstormsecurity.com/files/168249/Online-Market-Place-Site-1.0-SQL-Injection.html
CVE ID: CVE-2022-30007 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T06:40:47.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/breezety/gxcms15/issues/1 - https://github.com/ZackSecurity/VulnerReport/blob/cve/gxcms/1.md
CVE ID: CVE-2022-30011 State: PUBLISHED Published: 2022-05-16T12:41:57 Last Updated: 2024-08-03T06:40:47.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kabirkhyrul/HMS/discussions/15 - https://github.com/kabirkhyrul/HMS/tree/1.0
CVE ID: CVE-2022-30012 State: PUBLISHED Published: 2022-05-16T12:51:32 Last Updated: 2024-08-03T06:40:46.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kabirkhyrul/HMS/discussions/15 - https://github.com/kabirkhyrul/HMS/tree/1.0
CVE ID: CVE-2022-30013 State: PUBLISHED Published: 2022-05-16T13:29:33 Last Updated: 2024-08-03T06:40:47.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=E2784z7Bu2c - https://github.com/totaljs/framework
CVE ID: CVE-2022-30014 State: PUBLISHED Published: 2022-05-23T15:42:19 Last Updated: 2024-08-03T06:40:46.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account. Additional Analyst Notes: - CVE Program Container: References: - http://simple.com - http://lumidek.com - https://github.com/offsecin/bugsdisclose/blob/main/csrf
CVE ID: CVE-2022-30015 State: PUBLISHED Published: 2022-05-23T20:50:00 Last Updated: 2024-08-03T06:40:47.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/all_users.php like Full Username, etc .This causes stored xss. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/12510/simple-food-website-php.html - https://github.com/offsecin/bugsdisclose/blob/main/xss
CVE ID: CVE-2022-30016 State: PUBLISHED Published: 2022-05-23T16:59:58 Last Updated: 2024-08-03T06:40:47.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15296/rescue-dispatch-management-system-phpoop-free-source-code.html - https://github.com/offsecin/bugsdisclose/blob/main/access-control
CVE ID: CVE-2022-30017 State: PUBLISHED Published: 2022-05-23T16:20:02 Last Updated: 2024-08-03T06:40:47.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15296/rescue-dispatch-management-system-phpoop-free-source-code.html - https://github.com/offsecin/bugsdisclose/blob/main/stored-xss
CVE ID: CVE-2022-30018 State: PUBLISHED Published: 2022-05-19T13:13:01 Last Updated: 2024-08-03T06:40:47.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access to recordings/recording locations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PurplePetrus/MxCC_Credential-Storage_issue/blob/main/MxCC_improper_credential_storage
CVE ID: CVE-2022-30023 State: PUBLISHED Published: 2022-06-16T14:28:27 Last Updated: 2024-08-03T06:40:47.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - http://ont.com - https://github.com/Haniwa0x01/CVE-2022-30023
CVE ID: CVE-2022-30024 State: PUBLISHED Published: 2022-07-14T13:41:42 Last Updated: 2024-08-03T06:40:46.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://tl-wr841.com - https://pasteb
ditional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://tl-wr841.com - https://pastebin.com/0XRFr3zE
CVE ID: CVE-2022-30025 State: PUBLISHED Published: 2023-05-24T00:00:00 Last Updated: 2025-01-17T15:20:33.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in "/Framewrk/Home.jsp" file (POST method) in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/fir3storm/c8a013d1231c22e22835566609620afd
CVE ID: CVE-2022-30028 State: PUBLISHED Published: 2022-06-24T16:27:52 Last Updated: 2024-08-03T06:40:47.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token. Additional Analyst Notes: - CVE Program Container: References: - https://dradisframework.com/ce/security_reports.html
CVE ID: CVE-2022-30033 State: PUBLISHED Published: 2022-05-18T19:18:13 Last Updated: 2024-08-03T06:40:47.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/H4niz/Vulnerability/blob/main/Tenda-TX9-V22.03.02.10-19042022-2.md
CVE ID: CVE-2022-30034 State: PUBLISHED Published: 2022-05-31T13:13:32 Last Updated: 2024-08-03T06:40:47.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes. Additional Analyst Notes: - CVE Program Container: References: - http://githubcommherflower.com - https://tprynn.github.io/2022/05/26/flower-vulns.html - https://github.com/mher/flower/issues/1217
CVE ID: CVE-2022-30036 State: PUBLISHED Published: 2022-08-21T03:15:58 Last Updated: 2024-08-03T06:40:47.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: MA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product was designed for isolated networks. Also, the successor product, grandMA3, is not affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.malighting.com/product-archive/product/grandma2-light-120112/ - https://parzival.sh/posts/Pwning-a-Lighting-Console-in-a-Few-Minutes/
CVE ID: CVE-2022-30037 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:45:01.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://weltolk.github.io/p/xunruicms-v4.3.3-to-v4.5.1-backstage-code-injection-vulnerabilityfile-write-and-file-inclusion/
CVE ID: CVE-2022-30040 State: PUBLISHED Published: 2022-05-11T17:28:30 Last Updated: 2024-08-03T06:40:47.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Le1a/Tenda-AX1803-Denial-of-service - https://github.com/Le1a/CVE-2022-30040
CVE ID: CVE-2022-30045 State: PUBLISHED Published: 2022-05-17T19:24:56 Last Updated: 2024-08-03T06:40:47.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/29/
CVE ID: CVE-2022-30047 State: PUBLISHED Published: 2022-05-11T17:36:40 Last Updated: 2024-08-03T06:40:47.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mingSoft/MCMS/issues/I54VLM
CVE ID: CVE-2022-30048 State: PUBLISHED Published: 2022-05-11T17:38:00 Last Updated: 2024-08-03T06:40:46.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mingSoft/MCMS/issues/I54VG0
CVE ID: CVE-2022-30049 State: PUBLISHED Published: 2022-05-15T16:17:04 Last Updated: 2024-08-03T06:40:47.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getrebuild/rebuild/issues/460
CVE ID: CVE-2022-30050 State: PUBLISHED Published: 2022-05-16T16:40:24 Last Updated: 2024-08-03T06:40:47.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting (XSS) via bbs/member_confirm.php. Additional Analyst Notes: - CVE Program Container: References: - https://gratis-herring-da5.notion.site/Gnuboard-Reflected-XSS-25d593d8a2b84a46a998bfd5816c54fc
CVE ID: CVE-2022-30052 State: PUBLISHED Published: 2022-05-17T19:32:59 Last Updated: 2024-08-03T06:40:47.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/acetech/2022/Home-Clean-Service-System
CVE ID: CVE-2022-30053 State: PUBLISHED Published: 2022-05-17T19:35:19 Last Updated: 2024-08-03T06:40:47.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Toll-Tax-Management-System
CVE ID: CVE-2022-30054 State: PUBLISHED Published: 2022-05-17T19:38:43 Last Updated: 2024-08-03T06:40:47.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Covid-19-Travel-Pass-Management
CVE ID: CVE-2022-30055 State: PUBLISHED Published: 2022-05-16T16:47:19 Last Updated: 2024-08-03T06:40:47.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prime95 30.7 build 9 suffers from a Buffer Overflow vulnerability that could lead to Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/166840/Prime95-30.7-Build-9-Buffer-Overflow.html - https://mrvar0x.com/2022/04/25/prime95-buffer-overflow-rce/
CVE ID: CVE-2022-30057 State: PUBLISHED Published: 2022-05-11T17:51:58 Last Updated: 2024-08-03T06:40:47.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/7a16a567-53ce-4350-b983-9775776f2ffe
CVE ID: CVE-2022-30058 State: PUBLISHED Published: 2022-05-11T17:48:43 Last Updated: 2024-08-03T06:40:47.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/0a4355fa-441f-4073-b147-5079549251c5
CVE ID: CVE-2022-30059 State: PUBLISHED Published: 2022-05-11T17:49:38 Last Updated: 2024-08-03T06:40:47.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/a8385d36-8038-4fa2-b15b-48e104774d61
CVE ID: CVE-2022-30060 State: PUBLISHED Published: 2022-05-11T18:00:11 Last Updated: 2024-08-03T06:40:47.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/96dcc866-822e-4ea4-aafb-5a89a6d4412e
CVE ID: CVE-2022-30061 State: PUBLISHED Published: 2022-05-11T17:58:43 Last Updated: 2024-08-03T06:40:47.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/bb31a8e0-0f86-4edf-bdea-3b4e7162e344
CVE ID: CVE-2022-30062 State: PUBLISHED Published: 2022-05-11T18:01:45 Last Updated: 2024-08-03T06:40:47.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/713b23bf-2239-46de-9d1b-88b17d37dec3
CVE ID: CVE-2022-30063 State: PUBLISHED Published: 2022-05-11T18:03:25 Last Updated: 2024-08-03T06:40:47.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftcms <=2.1 was discovered to be vulnerable to code execution attacks . Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/docs/share/78d43e01-2e4c-4a63-a305-6e688bef3e94
CVE ID: CVE-2022-30065 State: PUBLISHED Published: 2022-05-18T00:00:00 Last Updated: 2024-08-03T06:40:47.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.busybox.net/show_bug.cgi?id=14781 - https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf