Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-44014 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-15T13:30:10.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL tables. This leaks all user passwords and MSSQL hashes via /DS/LM_API/api/SelectionService/GetPaggedTab. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/
CVE ID: CVE-2022-44015 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-15T13:28:50.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the attacker is able to execute arbitrary commands on the MSSQL server via the xp_cmdshell extended procedure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/
CVE ID: CVE-2022-44016 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-15T13:24:40.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download arbitrary files from the web server by abusing an API call: /DS/LM_API/api/ConfigurationService/GetImages with an '"ImagesPath":"C:\\"' value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/
CVE ID: CVE-2022-44017 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-15T13:23:41.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/
CVE ID: CVE-2022-44018 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T15:23:24.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-10.html
CVE ID: CVE-2022-44019 State: PUBLISHED Published: 2022-10-29T00:00:00.000Z Last Updated: 2025-05-07T13:58:14.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/totaljs/code/issues/12 - https://www.youtube.com/watch?v=x-u3eS8-xJg - https://www.edoardoottavianelli.it/CVE-2022-44019/
CVE ID: CVE-2022-44020 State: PUBLISHED Published: 2022-10-29T00:00:00.000Z Last Updated: 2025-05-07T13:57:26.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://storyboard.openstack.org/#%21/story/2010382 - https://review.opendev.org/c/openstack/virtualbmc/+/862620 - https://review.opendev.org/c/o
ack.org/#%21/story/2010382 - https://review.opendev.org/c/openstack/virtualbmc/+/862620 - https://review.opendev.org/c/openstack/sushy-tools/+/862625 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEQVJF3OQGSDCSQTQQSC54JEGLMSNB4Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAD7QJIUWPCKJIGYP7PPHH5DILOEONFE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMSUGS4B6EBRHBJMTRXL5RIKJTZTEMJC/
CVE ID: CVE-2022-44022 State: PUBLISHED Published: 2022-10-29T00:00:00.000Z Last Updated: 2025-05-07T13:53:41.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings for authentication attempts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pwndoc/pwndoc/issues/381 - https://cve.nstsec.com/cve-2022-44022
CVE ID: CVE-2022-44023 State: PUBLISHED Published: 2022-10-29T00:00:00 Last Updated: 2024-08-03T13:47:05.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messages for authentication attempts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pwndoc/pwndoc/issues/382 - https://cve.nstsec.com/cve-2022-44023
CVE ID: CVE-2022-44024 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T19:18:35.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1 of 6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2022-44025 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T18:28:23.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2 of 6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2022-44026 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T17:31:52.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3 of 6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2022-44027 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T17:23:37.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4 of 6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2022-44028 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T17:19:22.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5 of 6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2022-44029 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-28T18:26:49.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6 of 6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netscout.com/securityadvisories
CVE ID: CVE-2022-44030 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T16:15:51.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.redmine.org/news/139
CVE ID: CVE-2022-44031 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T20:35:00.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE ID: CVE-2022-44032 State: PUBLISHED Published: 2022-10-30T00:00:00 Last Updated: 2024-08-03T13:47:05.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cmm_open() and cm4000_detach(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lore.kernel.org/lkml/20220919040701.GA302806%40ubuntu/ - https://lore.kernel.org/lkml/20220915020834.GA110086%40ubuntu/ - https://git.kernel.org/cgit/
40701.GA302806%40ubuntu/ - https://lore.kernel.org/lkml/20220915020834.GA110086%40ubuntu/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15
CVE ID: CVE-2022-44033 State: PUBLISHED Published: 2022-10-30T00:00:00 Last Updated: 2024-08-03T13:47:05.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cm4040_open() and reader_detach(). Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/lkml/20220915020834.GA110086%40ubuntu/ - https://lore.kernel.org/lkml/20220919040457.GA302681%40ubuntu/ - https://git.kernel.org/cgit/linux/kernel/git/torva
u/ - https://lore.kernel.org/lkml/20220919040457.GA302681%40ubuntu/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15
CVE ID: CVE-2022-44034 State: PUBLISHED Published: 2022-10-30T00:00:00 Last Updated: 2024-08-03T13:47:05.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between scr24x_open() and scr24x_remove(). Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/lkml/20220919101825.GA313940%40ubuntu/ - https://lore.kernel.org/lkml/20220916050333.GA188358%40ubuntu/ - https://git.kernel.org/cgit/linux/kernel/git/torva
u/ - https://lore.kernel.org/lkml/20220916050333.GA188358%40ubuntu/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15
CVE ID: CVE-2022-44036 State: PUBLISHED Published: 2023-01-03T00:00:00 Last Updated: 2024-08-03T13:47:05.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor's position is that this is "very obviously a feature not an issue and if you don't like that feature it is very obvious how to disable it." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/b2evolution/b2evolution/issues/121
CVE ID: CVE-2022-44037 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T15:36:32.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple attacks, such as attacking wireless network in the product's range. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44037
CVE ID: CVE-2022-44038 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-04-25T15:34:54.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44038
CVE ID: CVE-2022-44039 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:55:15.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite (remote). ¶¶ An attacker can overwrite system files like [system.conf] and [passwd], this occurs because the insecure usage of "fopen" system function with the mode "wb" which allows overwriting file if exists. Overwriting files such as passwd, allows an attacker to escalate his privileges by planting backdoor user with root privilege or change root password. Additional Analyst Notes: - CVE Program Co
ileges by planting backdoor user with root privilege or change root password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pastebin.com/raw/64stbsWu
CVE ID: CVE-2022-44048 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:17:24.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-urls/ - https://pypi.org/project/democritus-domains/ - https://github.com/dadadadada111/info/issues/12
CVE ID: CVE-2022-44049 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:19:29.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-grammars package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-python/ - https://pypi.org/project/democritus-grammars/ - https://github.com/dadadadada111/info/issues/13
CVE ID: CVE-2022-44050 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:20:55.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-json package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-networking/ - https://pypi.org/project/democritus-json/ - https://github.com/dadadadada111/info/issues/14
CVE ID: CVE-2022-44051 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:22:11.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-stats/ - https://pypi.org/project/democritus-math/ - https://github.com/dadadadada111/info/issues/15
CVE ID: CVE-2022-44052 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:24:13.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-timezones package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-dates/ - https://pypi.org/project/democritus-timezones/ - https://github.com/dadadadada111/info/issues/16
CVE ID: CVE-2022-44053 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T18:25:17.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-user-agents package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-networking/ - https://pypi.org/project/democritus-user-agents/ - https://github.com/dadadadada111/info/issues/17
CVE ID: CVE-2022-44054 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-01T17:44:28.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-utility package. The affected version of d8s-htm is 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/d8s-xml/ - https://pypi.org/project/democritus-utility/ - https://github.com/dadadadada111/info/issues/18
CVE ID: CVE-2022-44069 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:31:30.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/4
CVE ID: CVE-2022-44070 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:24:27.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/3
CVE ID: CVE-2022-44071 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:23:15.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/5
CVE ID: CVE-2022-44073 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:22:14.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hieuminhnv/Zenario-CMS-last-version/issues/6
CVE ID: CVE-2022-44079 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T18:49:30.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component __sanitizer::StackDepotBase<__sanitizer::StackDepotNode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zrax/pycdc/issues/291
CVE ID: CVE-2022-44081 State: PUBLISHED Published: 2022-10-31T00:00:00.000Z Last Updated: 2025-05-06T18:51:08.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lvandeve/lodepng/issues/177
CVE ID: CVE-2022-44087 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-05-01T13:42:34.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZOOM_HIGHT. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://espcms.com - https://gitee.com/earclink/espcms/issues/I5WSA0
CVE ID: CVE-2022-44088 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-05-01T14:06:59.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://espcms.com - https://gitee.com/earclink/espcms/issues/I5WSND
CVE ID: CVE-2022-44089 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-05-01T14:04:31.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://espcms.com - https://gitee.com/earclink/espcms/issues/I5WSQ1
CVE ID: CVE-2022-44096 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-25T14:30:51.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/upasvi/CVE-/issues/1
CVE ID: CVE-2022-44097 State: PUBLISHED Published: 2022-11-30T00:00:00.000Z Last Updated: 2025-04-24T20:35:57.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/upasvi/CVE-/issues/2