Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28387 State: PUBLISHED Published: 2022-06-08T15:29:51 Last Updated: 2024-08-03T05:56:14.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they can be unlocked by an attacker who can then gain unauthorized access to the stored data. The attacker can simply use an undocumented IOCTL command that retrieves the correct password. This affects Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 and Fingerprint Secure Portable Hard Drive Part Number #53650. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publ
er #53650. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-009.txt - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-014.txt - http://seclists.org/fulldisclosure/2022/Jun/21 - http://seclists.org/fulldisclosure/2022/Jun/13 - http://packetstormsecurity.com/files/167527/Verbatim-Executive-Fingerprint-Secure-SSD-GDMSFE01-INI3637-C-VER1.1-Risky-Crypto.html - http://packetstormsecurity.com/files/167531/Verbatim-Fingerprint-Secure-Portable-Hard-Drive-53650-Risky-Crypto.html
CVE ID: CVE-2022-28388 State: PUBLISHED Published: 2022-04-03T20:07:39.000Z Last Updated: 2025-05-05T16:21:52.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/3d3925ff6433f98992685a9679613a2cc97f3ce2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7
FOVZ6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/ - https://www.debian.org/security/2022/dsa-5127 - https://security.netapp.com/advisory/ntap-20220513-0001/ - https://www.debian.org/security/2022/dsa-5173
CVE ID: CVE-2022-28389 State: PUBLISHED Published: 2022-04-03T20:07:30 Last Updated: 2024-08-03T05:56:15.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/04c9b00ba83594a29813d6b1fb8fdc93a3915174 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/ - https://
roject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/ - https://www.debian.org/security/2022/dsa-5127 - https://security.netapp.com/advisory/ntap-20220513-0001/ - https://www.debian.org/security/2022/dsa-5173
CVE ID: CVE-2022-28390 State: PUBLISHED Published: 2022-04-03T20:07:21 Last Updated: 2024-08-03T05:56:15.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/c70222752228a62135cee3409dccefd494a24646 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAWC35TO642FOP3UCA3C6IF7NAUFOVZ6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/ - https://li
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFMPUI3WI4U2F7ONHRW36WDY4ZE7LGGT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IHHC455LMSJNG4CSZ5CEAHYWY2DE5YW/ - https://www.debian.org/security/2022/dsa-5127 - https://security.netapp.com/advisory/ntap-20220513-0001/ - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - https://www.debian.org/security/2022/dsa-5173
CVE ID: CVE-2022-28391 State: PUBLISHED Published: 2022-04-03T20:20:12.000Z Last Updated: 2025-06-09T15:33:29.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661 - https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch - https://git.alpinelinux.o
rg/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch - https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
CVE ID: CVE-2022-28394 State: PUBLISHED Published: 2022-05-26T23:25:27 Last Updated: 2024-08-03T05:56:15.184Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: Uncontrolled Search Path Element Description: EOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Please note that this was reported on an EOL version of the product, and users are advised to upgrade to the latest supported version (5.x). Additional Analyst Notes: - CVE Program Container: References: - https://he
grade to the latest supported version (5.x). Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10977 - https://jvn.jp/en/jp/JVN60037444/ - https://jvn.jp/jp/JVN60037444/
CVE ID: CVE-2022-28396 State: REJECTED Published: 2022-04-12T16:29:06 Last Updated: 2022-06-30T12:41:52 Description: No description available.
CVE ID: CVE-2022-28397 State: PUBLISHED Published: 2022-04-12T16:29:06 Last Updated: 2024-08-03T05:56:15.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a crafted file. NOTE: Vendor states as detailed in Ghost's security documentation, files can only be uploaded and published by trusted users, this is intentional Additional Analyst Notes: - CVE Program Container: References: - http://ghost.com - https://ghost.org/customers/ - https://github.com/TryGhost/Ghost - https://trends.builtwith.com/cms/Ghost - https://youtu.be/PncfBetPk2g - https://ghost
ttps://github.com/TryGhost/Ghost - https://trends.builtwith.com/cms/Ghost - https://youtu.be/PncfBetPk2g - https://ghost.org/docs/security/#privilege-escalation-attacks
CVE ID: CVE-2022-28410 State: PUBLISHED Published: 2022-04-21T19:05:15 Last Updated: 2024-08-03T05:56:15.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=delete_agent. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Simple-Real-Estate-Portal-System/SQLi-4.md
CVE ID: CVE-2022-28411 State: PUBLISHED Published: 2022-04-21T19:05:14 Last Updated: 2024-08-03T05:56:15.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manage_agent. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Simple-Real-Estate-Portal-System/SQLi-5.md
CVE ID: CVE-2022-28412 State: PUBLISHED Published: 2022-04-21T19:05:13 Last Updated: 2024-08-03T05:56:14.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=delete_package. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/car-driving-school-management-system/SQLi-1.md
CVE ID: CVE-2022-28413 State: PUBLISHED Published: 2022-04-21T19:05:12 Last Updated: 2024-08-03T05:56:15.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=delete_enrollment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/car-driving-school-management-system/SQLi-2.md
CVE ID: CVE-2022-28414 State: PUBLISHED Published: 2022-04-21T19:05:12 Last Updated: 2024-08-03T05:56:15.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_member. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Home-Owners-Collection-Management/SQLi-1.md
CVE ID: CVE-2022-28415 State: PUBLISHED Published: 2022-04-21T19:05:11 Last Updated: 2024-08-03T05:56:15.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_collection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Home-Owners-Collection-Management/SQLi-2.md
CVE ID: CVE-2022-28416 State: PUBLISHED Published: 2022-04-21T19:05:11 Last Updated: 2024-08-03T05:56:15.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Home-Owners-Collection-Management/SQLi-3.md
CVE ID: CVE-2022-28417 State: PUBLISHED Published: 2022-04-21T19:05:10 Last Updated: 2024-08-03T05:56:14.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Home-Owners-Collection-Management/SQLi-4.md
CVE ID: CVE-2022-28420 State: PUBLISHED Published: 2022-04-21T19:05:06 Last Updated: 2024-08-03T05:56:15.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-1.md
CVE ID: CVE-2022-28421 State: PUBLISHED Published: 2022-04-21T19:05:05 Last Updated: 2024-08-03T05:56:15.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-2.md
CVE ID: CVE-2022-28422 State: PUBLISHED Published: 2022-04-21T19:05:04 Last Updated: 2024-08-03T05:56:15.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-3.md
CVE ID: CVE-2022-28423 State: PUBLISHED Published: 2022-04-21T19:05:04 Last Updated: 2024-08-03T05:56:15.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-4.md
CVE ID: CVE-2022-28424 State: PUBLISHED Published: 2022-04-21T19:05:03 Last Updated: 2024-08-03T05:56:15.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-5.md
CVE ID: CVE-2022-28425 State: PUBLISHED Published: 2022-04-21T19:05:02 Last Updated: 2024-08-03T05:56:15.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-6.md
CVE ID: CVE-2022-28426 State: PUBLISHED Published: 2022-04-21T19:05:07 Last Updated: 2024-08-03T05:56:15.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-7.md
CVE ID: CVE-2022-28427 State: PUBLISHED Published: 2022-04-21T19:05:01 Last Updated: 2024-08-03T05:56:15.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-9.md
CVE ID: CVE-2022-28429 State: PUBLISHED Published: 2022-04-21T19:04:59 Last Updated: 2024-08-03T05:56:15.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-10.md
CVE ID: CVE-2022-28431 State: PUBLISHED Published: 2022-04-21T19:04:57 Last Updated: 2024-08-03T05:56:15.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-12.md
CVE ID: CVE-2022-28432 State: PUBLISHED Published: 2022-04-21T19:04:57 Last Updated: 2024-08-03T05:56:15.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-13.md
CVE ID: CVE-2022-28433 State: PUBLISHED Published: 2022-04-21T19:04:56 Last Updated: 2024-08-03T05:56:15.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-16.md
CVE ID: CVE-2022-28434 State: PUBLISHED Published: 2022-04-21T19:04:56 Last Updated: 2024-08-03T05:56:15.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11
CVE ID: CVE-2022-28435 State: PUBLISHED Published: 2022-04-21T19:04:55 Last Updated: 2024-08-03T05:56:15.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-15.md
CVE ID: CVE-2022-28436 State: PUBLISHED Published: 2022-04-21T19:04:54 Last Updated: 2024-08-03T05:56:15.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-17.md
CVE ID: CVE-2022-28437 State: PUBLISHED Published: 2022-04-21T19:04:54 Last Updated: 2024-08-03T05:56:15.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-18.md
CVE ID: CVE-2022-28438 State: PUBLISHED Published: 2022-04-21T19:04:53 Last Updated: 2024-08-03T05:56:15.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-20.md
CVE ID: CVE-2022-28439 State: PUBLISHED Published: 2022-04-21T19:04:52 Last Updated: 2024-08-03T05:56:15.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/vendors/janobe/baby-care-system/SQLi-19.md
CVE ID: CVE-2022-28440 State: PUBLISHED Published: 2022-04-21T19:04:52 Last Updated: 2024-08-03T05:56:15.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/UCMS-1.6/UCMS-RCE1.md
CVE ID: CVE-2022-28443 State: PUBLISHED Published: 2022-04-21T19:04:49 Last Updated: 2024-08-03T05:56:15.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11
CVE ID: CVE-2022-28444 State: PUBLISHED Published: 2022-04-21T19:04:49 Last Updated: 2024-08-03T05:56:15.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCMS v1.6 was discovered to contain an arbitrary file read vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/UCMS-1.6/Arbitrary-file-reading-1.md
CVE ID: CVE-2022-28445 State: PUBLISHED Published: 2022-04-21T19:04:50 Last Updated: 2024-08-03T05:56:15.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/k0xx11/bug_report/blob/main/kitecms/Arbitrary-file-reading-1.md
CVE ID: CVE-2022-28448 State: PUBLISHED Published: 2022-04-26T19:58:32 Last Updated: 2024-08-03T05:56:15.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). An attacker (role customer) can inject javascript code to First name or Last name at Customer Info. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nopSolutions/nopCommerce/issues/6191
CVE ID: CVE-2022-28449 State: PUBLISHED Published: 2022-04-26T20:02:42 Last Updated: 2024-08-03T05:56:15.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nopSolutions/nopCommerce/issues/6192
CVE ID: CVE-2022-28450 State: PUBLISHED Published: 2022-04-26T20:05:46 Last Updated: 2024-08-03T05:56:15.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a remote attacker to execute arbitrary JavaScript code at client browser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nopSolutions/nopCommerce/issues/6194
CVE ID: CVE-2022-28451 State: PUBLISHED Published: 2022-05-01T23:12:44 Last Updated: 2024-08-03T05:56:15.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nopSolutions/nopCommerce/commit/47ff9a241243db9359f10216bcf401baaa36d0b4 - https://github.com/nopSolutions/nopCommerce/issues/6203
CVE ID: CVE-2022-28452 State: PUBLISHED Published: 2022-04-29T14:59:48 Last Updated: 2024-08-03T05:56:15.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://laundry.redplanetcomputers.com/ - https://laundry.redplanetcomputers.com/demo/index.php/login - https://sourceforge.net/projects/laundry-management-system/ - https://github.com/YavuzSahbaz/Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL - https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-28452
CVE ID: CVE-2022-28454 State: PUBLISHED Published: 2022-04-28T19:56:03 Last Updated: 2024-08-03T05:56:15.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.limbas.org/ - https://sourceforge.net/projects/limbas/ - https://github.com/YavuzSahbaz/Limbas-4.3.36.1319-is-vulnerable-to-Cross-Site-Scripting-XSS-
CVE ID: CVE-2022-28461 State: PUBLISHED Published: 2022-05-05T12:18:30 Last Updated: 2024-08-03T05:56:15.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lanfei-4/mingyuefusu/issues/1