Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-1724 State: PUBLISHED Published: 2022-06-13T12:42:31 Last Updated: 2024-08-03T00:16:58.963Z Vendors: Unknown Products: Simple Membership Problem Types: CWE-79 Description: The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/96a0a667-9c4b-4ea6-b78a-0681e9a9bbae
CVE ID: CVE-2022-1725 State: PUBLISHED Published: 2022-05-16T00:00:00 Last Updated: 2024-08-03T00:16:58.809Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4363cf07-233e-4d0a-a1d5-c731a400525c - https://github.com/vim/vim/commit/b62dc5e7825bc195efe3041d5b3a9f1528359e1c - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://security.gentoo.org/glsa
lists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1726 State: PUBLISHED Published: 2022-05-16T14:55:18 Last Updated: 2024-08-03T00:16:58.885Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L) Vendors: wenzhixin Products: wenzhixin/bootstrap-table Problem Types: CWE-79 Description: Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/9b85cc33-0395-4c31-8a42-3a94beb2efea - https://github.com/wenzhixin/bootstr
er: References: - https://huntr.dev/bounties/9b85cc33-0395-4c31-8a42-3a94beb2efea - https://github.com/wenzhixin/bootstrap-table/commit/b4a1e5dd332be652e0bc376fd9256886cf4bbde9
CVE ID: CVE-2022-1727 State: PUBLISHED Published: 2022-05-18T10:25:12 Last Updated: 2024-08-03T00:16:58.942Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: jgraph Products: jgraph/drawio Problem Types: CWE-20 Description: Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b242e806-fc8c-41c0-aad7-e0c9c37ecdee - https://github.com/jgraph/drawio/commit/4deecee18191f67e242422abf3ca304e19e49687
CVE ID: CVE-2022-1728 State: PUBLISHED Published: 2022-05-16T14:55:13 Last Updated: 2024-08-03T00:16:58.994Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-190 Description: Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3c6cb129-6995-4722-81b5-af052572b519 - https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c
//huntr.dev/bounties/3c6cb129-6995-4722-81b5-af052572b519 - https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c72e7bf011cf396d1f73c19
CVE ID: CVE-2022-1729 State: PUBLISHED Published: 2022-09-01T00:00:00 Last Updated: 2024-08-03T00:16:58.917Z Vendors: n/a Products: linux kernel Problem Types: CWE-366 Description: A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ac6487e584a1eb54071dbe1212e05b884136704 - https://www.openwall.com/lists/oss-security/2022/05/20/2 - https://security.ne
ac6487e584a1eb54071dbe1212e05b884136704 - https://www.openwall.com/lists/oss-security/2022/05/20/2 - https://security.netapp.com/advisory/ntap-20230214-0006/
CVE ID: CVE-2022-1730 State: PUBLISHED Published: 2022-05-19T13:55:12 Last Updated: 2024-08-03T00:16:58.957Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: jgraph Products: jgraph/drawio Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jgraph/drawio/commit/4deecee18191f67e242422abf3ca304e19e49687 - https://huntr.dev/bounties/fded4835-bd49-4533-8311-1d71e0ed7c00
CVE ID: CVE-2022-1731 State: PUBLISHED Published: 2022-05-16T18:25:41 Last Updated: 2024-08-03T00:16:58.957Z Vendors: n/a Products: Metasonic Doc WebClient Problem Types: SQL Injection Description: Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2022-17
CVE ID: CVE-2022-1732 State: PUBLISHED Published: 2022-07-11T12:56:10 Last Updated: 2024-08-03T00:16:59.695Z Vendors: Unknown Products: Rename wp-login.php Problem Types: CWE-352 Description: The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3620a087-032e-4a5f-99c8-f9e7e9c29813
CVE ID: CVE-2022-1733 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T00:16:59.835Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6ff03b27-472b-4bef-a2bf-410fae65ff0a - https://github.com/vim/vim/commit/60ae0e71490c97f2871a6344aca61cacf220f813 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS/ - https://lists.fedoraproject.org/arc
ckage-announce%40lists.fedoraproject.org/message/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFAZTAT5CZC2R6KYDYA2HBAVEDSIX6MW/ - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1734 State: PUBLISHED Published: 2022-05-18T16:28:09 Last Updated: 2024-08-03T00:16:58.793Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/d270453a0d9ec10bb8a802a142fb1b3601a83098 - http://www.openwall.com/lists/oss-security/2022/06/05/4 - http://www.openwall.com/lists/oss-security/2022/06/09/1 - https://lists.debian.org/debian-lts-announce/2
/2022/06/05/4 - http://www.openwall.com/lists/oss-security/2022/06/09/1 - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173 - https://security.netapp.com/advisory/ntap-20220707-0007/
CVE ID: CVE-2022-1735 State: PUBLISHED Published: 2022-05-17T00:00:00 Last Updated: 2024-08-03T00:16:58.902Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-120 Description: Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c9f85608-ff11-48e4-933d-53d1759d44d9 - https://github.com/vim/vim/commit/7ce5b2b590256ce53d6af28c1d203fb3bc1d2d97 - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/20
//support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - https://security.gentoo.org/glsa/202305-16
CVE ID: CVE-2022-1736 State: PUBLISHED Published: 2025-01-31T01:35:46.759Z Last Updated: 2025-02-07T16:07:47.540Z Vendors: Canonical Ltd. Products: Ubuntu's gnome-control-center Description: Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5430-1 - https://bugs.launchpad.net/ubuntu/+source/gnome-remote-desktop/+bug/1973028 - https://ubuntu.com/security/CVE-2022-1736
CVE ID: CVE-2022-1737 State: PUBLISHED Published: 2022-07-12T20:41:46.000Z Last Updated: 2025-04-16T16:15:23.086Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Pyramid Solutions Products: EtherNet/IP Adapter Development Kit (EADK), EtherNet/IP Adapter DLL Kit (EIPA), EtherNet/IP Scanner Development Kit (EDKS), EtherNet/IP Scanner DLL Kit (EIPS) Problem Types: CWE-787 Description: Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service conditio
ch may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-04
CVE ID: CVE-2022-1738 State: PUBLISHED Published: 2022-10-19T17:24:32.153Z Last Updated: 2025-04-16T17:46:22.133Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Fuji Electric Products: D300win Problem Types: CWE-125 Description: Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to an out-of-bounds read, which could allow an attacker to leak sensitive data from the process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-05
CVE ID: CVE-2022-1739 State: PUBLISHED Published: 2022-06-24T15:00:22.129Z Last Updated: 2025-04-17T18:47:32.163Z Vendors: Dominion Voting Systems Products: ImageCast X firmware, ImageCast X application Problem Types: CWE-347 Description: The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a trusted root certificate ensures software installed on a device is traceable to, or verifiable against, a cryptographic key provided by the manufacturer to detect tampering. An attacker could leverage this vulnerability to install malicious code, which could also be spread to other vulnerable ImageCast X devices via remo
his vulnerability to install malicious code, which could also be spread to other vulnerable ImageCast X devices via removable media. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1740 State: PUBLISHED Published: 2022-06-24T15:00:27.003Z Last Updated: 2025-04-17T18:46:49.242Z Vendors: Dominion Voting Systems Products: ImageCast X application, ImageCast X firmware Problem Types: CWE-1283 Description: The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1741 State: PUBLISHED Published: 2022-06-24T15:00:24.654Z Last Updated: 2025-04-17T18:47:11.112Z Vendors: Dominion Voting Systems Products: ImageCast X application, ImageCast X firmware Problem Types: CWE-912 Description: The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1742 State: PUBLISHED Published: 2022-06-24T15:00:26.248Z Last Updated: 2025-04-17T18:46:56.195Z Vendors: Dominion Voting Systems Products: ImageCast X application, ImageCast X firmware Problem Types: CWE-424 Description: The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1743 State: PUBLISHED Published: 2022-06-24T15:00:25.427Z Last Updated: 2025-04-17T18:47:03.677Z Vendors: Dominion Voting System Products: ImageCast X application, ImageCast X firmware Problem Types: CWE-24 Description: The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1744 State: PUBLISHED Published: 2022-06-24T15:00:23.804Z Last Updated: 2025-04-17T18:47:17.814Z Vendors: Dominion Voting System Products: ImageCast X application, ImageCast X firmware Problem Types: CWE-250 Description: Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1745 State: PUBLISHED Published: 2022-06-24T15:00:27.944Z Last Updated: 2025-04-17T18:46:41.583Z Vendors: Dominion Voting Systems Products: ImageCast X application, ImageCast X firmware Problem Types: CWE-290 Description: The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1746 State: PUBLISHED Published: 2022-06-24T15:00:21.325Z Last Updated: 2025-04-17T18:47:40.296Z Vendors: Dominion Voting Systems Products: ImageCast X application, ImageCast X firmware Problem Types: CWE-266 Description: The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
ting other election equipment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1747 State: PUBLISHED Published: 2022-06-24T15:00:22.908Z Last Updated: 2025-04-17T18:47:25.150Z Vendors: Dominion Voting Systems Products: ImageCast X firmware, ImageCast X application Problem Types: CWE-346 Description: The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01
CVE ID: CVE-2022-1748 State: PUBLISHED Published: 2022-08-17T20:08:38.000Z Last Updated: 2025-04-16T16:13:15.237Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Softing Products: Secure Integration Server, OPC UA C++ SDK, edgeConnector Siemens, edgeConnector 840D, edgeConnector Modbus, edgeAggregator Problem Types: CWE-476 Description: Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04 - https://in
Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04 - https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-7.html
CVE ID: CVE-2022-1749 State: PUBLISHED Published: 2022-06-13T13:13:21.000Z Last Updated: 2025-05-05T16:41:19.752Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: createplugin Products: WPMK Ajax Finder Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
, in versions up to and including 1.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1d063d01-5f67-4c7f-ab71-01708456e82b?source=cve - https://plugins.trac.wordpress.org/browser/find-any-think/trunk/inc/config/create-plugin-admin.php - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1749
CVE ID: CVE-2022-1750 State: PUBLISHED Published: 2022-06-13T13:20:31.000Z Last Updated: 2025-05-05T16:41:09.420Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: numixtech Products: Sticky Popup Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Sticky Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ popup_title' parameter in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with admin level capabilities and above, to inject arbitrary web scripts in pages tha
sible for authenticated attackers, with admin level capabilities and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This issue mostly affects sites where unfiltered_html has been disabled for administrators and on multi-site installations where unfiltered_html is disabled for administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4a5262d8-d9cd-4bd9-a95e-f60782095173?source=cve - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1750
CVE ID: CVE-2022-1751 State: PUBLISHED Published: 2024-08-17T07:34:18.138Z Last Updated: 2024-08-19T13:50:55.581Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: thiagosf Products: Skitter Slideshow Problem Types: CWE-918 Description: The Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.2 via the /image.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
ry and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/175eba7e-454b-4ba3-bbb5-22bd56734f5c?source=cve - https://securityforeveryone.com/blog/wordpress-skitter-slideshow-ssrf-0-day-vulnerability-cve-2022-1751 - https://plugins.trac.wordpress.org/browser/wp-skitter-slideshow/trunk/image.php
CVE ID: CVE-2022-1752 State: PUBLISHED Published: 2022-05-21T02:50:09 Last Updated: 2024-08-03T00:16:59.901Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/66e9bfa9-598f-49ab-a472-752911df3f2d - https://github.com/polonel/trudesk/commit/d107f12e71c0fe1e7ac0fdc7463f59c4965a42cd
CVE ID: CVE-2022-1753 State: PUBLISHED Published: 2022-05-17T05:15:12.000Z Last Updated: 2025-04-15T14:40:33.905Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: unspecified Products: WoWonder Problem Types: CWE-284 Description: A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument group_id allows posting messages in other groups. It is possible to launch the attack remotely but it might require authentication. A video explaining the attack has been disclosed to the public. Additional Analyst Notes: - CVE Program Container: -
on. A video explaining the attack has been disclosed to the public. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/tIzOZtp2fxA - https://www.youtube.com/watch?v=tIzOZtp2fxA - https://vuldb.com/?id.199974
CVE ID: CVE-2022-1754 State: PUBLISHED Published: 2022-05-20T07:05:10 Last Updated: 2024-08-03T00:16:59.680Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: polonel Products: polonel/trudesk Problem Types: CWE-190 Description: Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c72e7bf011cf396d1f73c19 - https://huntr.dev/bounties/2f65af7c-a74b-46a6-8847-5db6785f1cf2