Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-40834 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:28:42.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php or_not_like() function. Note: Multiple third parties have disputed this as not a valid vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md - https://github.com/bcit-ci/CodeIgniter/issues/6161
CVE ID: CVE-2022-40835 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T12:28:42.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: B.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system\database\DB_query_builder.php. Note: Multiple third parties have disputed this as not a valid vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.com/726232111/CodeIgniter3.1.13-SQL-Inject/blob/main/README.md - https://github.com/bcit-ci/CodeIgniter/issues/6161
CVE ID: CVE-2022-40839 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T15:13:40.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ndk.com - http://ndkadvancedcustomizationfields.com - https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40839/poc.txt
CVE ID: CVE-2022-40840 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-05-02T20:56:47.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ndkadvancedcustomizationfields.com - https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40840/poc.txt
CVE ID: CVE-2022-40841 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T17:37:40.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ndkadvancedcustomizationfields.com - https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40841/poc.txt
CVE ID: CVE-2022-40842 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T15:13:59.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ndkadvancedcustomizationfields.com - https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40842/poc.txt
CVE ID: CVE-2022-40843 State: PUBLISHED Published: 2022-11-15T00:00:00 Last Updated: 2024-08-03T12:28:42.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account. Additional Analyst Notes: - CVE Program Container: References: - https://boschko.ca/tenda_ac1200_router/
CVE ID: CVE-2022-40844 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-05-14T20:08:42.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/tenda_ac1200_router/
CVE ID: CVE-2022-40845 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-05-13T19:29:11.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not explicitly authorized to have. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/tenda_ac1200_router/
CVE ID: CVE-2022-40846 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:48:53.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) vulnerability exists allowing an attacker to execute JavaScript code via the applications stored hostname. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/tenda_ac1200_router/
CVE ID: CVE-2022-40847 State: PUBLISHED Published: 2022-11-15T00:00:00.000Z Last Updated: 2025-04-30T14:47:48.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boschko.ca/tenda_ac1200_router/
CVE ID: CVE-2022-40849 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T20:23:24.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thinkcmf/thinkcmf/issues/737
CVE ID: CVE-2022-40851 State: PUBLISHED Published: 2022-09-23T14:02:51.000Z Last Updated: 2025-05-22T20:09:17.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/addressNat.md
CVE ID: CVE-2022-40853 State: PUBLISHED Published: 2022-09-23T13:59:58.000Z Last Updated: 2025-05-22T20:10:28.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_set Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/form_fast_setting_wifi_set.md
CVE ID: CVE-2022-40854 State: PUBLISHED Published: 2022-09-23T14:17:07.000Z Last Updated: 2025-05-22T20:08:24.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/form_fast_setting_wifi_set.md
CVE ID: CVE-2022-40855 State: PUBLISHED Published: 2022-09-23T14:29:36.000Z Last Updated: 2025-05-22T20:01:35.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code Execution (RCE) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/formSetPortMapping.m
: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/formSetPortMapping.md
CVE ID: CVE-2022-40860 State: PUBLISHED Published: 2022-09-23T13:47:20.000Z Last Updated: 2025-05-22T20:11:10.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetNetControlList Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/formSetQosBand.md
CVE ID: CVE-2022-40861 State: PUBLISHED Published: 2022-09-23T14:37:09.000Z Last Updated: 2025-05-22T20:00:59.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/formSetQosBand.md
CVE ID: CVE-2022-40862 State: PUBLISHED Published: 2022-09-23T13:45:25.000Z Last Updated: 2025-05-22T20:28:43.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/fromNatStaticSetting.md - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/fromNatStaticSetting.md
CVE ID: CVE-2022-40864 State: PUBLISHED Published: 2022-09-23T13:38:53.000Z Last Updated: 2025-05-22T20:29:21.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /goform/PowerSaveSet Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/setSmartPowerManagement.md - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/setSmartPowerManagement.md
CVE ID: CVE-2022-40865 State: PUBLISHED Published: 2022-09-23T13:35:42.000Z Last Updated: 2025-05-27T14:43:34.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSchedWifi/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/setSchedWifi.md - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/setSchedWifi.md
CVE ID: CVE-2022-40866 State: PUBLISHED Published: 2022-09-23T14:26:40.000Z Last Updated: 2025-05-22T20:02:07.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formSetDebugCfg with request /goform/setDebugCfg/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/setDebugCfg.md
CVE ID: CVE-2022-40867 State: PUBLISHED Published: 2022-09-23T14:25:04.000Z Last Updated: 2025-05-22T20:04:25.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formIPMacBindDel with the request /goform/delIpMacBind/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/formIPMacBindDel.md
CVE ID: CVE-2022-40868 State: PUBLISHED Published: 2022-09-23T14:22:47.000Z Last Updated: 2025-05-22T20:05:54.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function formDelDhcpRule with the request /goform/delDhcpRules/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/formDelDhcpRule.md
CVE ID: CVE-2022-40869 State: PUBLISHED Published: 2022-09-23T13:32:22.000Z Last Updated: 2025-05-27T14:44:13.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*" ("%s%d","list"). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC15/fromDhcpListClient-list.md - https://github.com/CPSeek/Router-vuls/blob/main/Tenda/AC18/fromDhcpListClient-list.md
CVE ID: CVE-2022-40870 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T15:12:28.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/Parallels/tree/main/ParallelsRemoteApplicationServer - https://github.com/IthacaLabs/Parallels/blob/main/ParallelsRemoteApplicationServer/HHI_CVE-2022-40870.txt
CVE ID: CVE-2022-40871 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T15:01:22.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/youncyb/dolibarr-rce
CVE ID: CVE-2022-40872 State: PUBLISHED Published: 2022-10-07T00:00:00.000Z Last Updated: 2025-05-20T14:57:50.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL injection vulnerability issue was discovered in Sourcecodester Simple E-Learning System 1.0., in /vcs/classRoom.php?classCode=, classCode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xtxxueyan/bug_report/blob/main/vendors/onetnom23/Simple%20E-Learning%20System/SQLi-1.md
CVE ID: CVE-2022-40874 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-07T16:22:21.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow vulnerability in the GetParentControlInfo function, which can cause a denial of service attack through a carefully constructed http request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/L0g4n-blog/p/16695155.html
CVE ID: CVE-2022-40875 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-07T16:21:19.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow in the function GetParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/L0g4n-blog/p/16695155.html
CVE ID: CVE-2022-40876 State: PUBLISHED Published: 2022-10-27T00:00:00.000Z Last Updated: 2025-05-07T16:20:40.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/L0g4n-blog/p/16695155.html - https://www.cnblogs.com/L0g4n-blog/p/16704071.html
CVE ID: CVE-2022-40877 State: PUBLISHED Published: 2022-09-27T16:04:01.000Z Last Updated: 2025-05-21T15:05:48.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/50725
CVE ID: CVE-2022-40878 State: PUBLISHED Published: 2022-09-27T16:01:40.000Z Last Updated: 2025-05-21T15:06:37.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/50726
CVE ID: CVE-2022-40879 State: PUBLISHED Published: 2022-09-29T16:22:54.000Z Last Updated: 2025-05-20T20:01:53.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.' Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kekingcn/kkFileView/issues/389
CVE ID: CVE-2022-40881 State: PUBLISHED Published: 2022-11-17T00:00:00.000Z Last Updated: 2025-04-29T20:29:32.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Timorlover/SolarView_Compact_6.0_rce_via_network_test.php
CVE ID: CVE-2022-40884 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:47:05.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 1.6.0 has memory leaks via the mp4fragment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/759 - https://github.com/yangfar/CVE/blob/main/CVE-2022-40884.md
CVE ID: CVE-2022-40885 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:45:27.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/761 - https://github.com/yangfar/CVE/blob/main/CVE-2022-40885.md
CVE ID: CVE-2022-40886 State: PUBLISHED Published: 2022-10-03T01:08:01 Last Updated: 2024-08-03T12:28:42.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7.98 has a file upload vulnerability in the background. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ephemeral1y/Vulnerability/blob/master/DedeCMS/5.7.98/DedeCMS-v5.7.98-RCE.md
CVE ID: CVE-2022-40887 State: PUBLISHED Published: 2022-09-29T16:08:36.000Z Last Updated: 2025-05-20T20:00:06.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/toyydsBT123/One_of_my_take_on_SourceCodester/blob/main/Best-Student-Result-Management-System_1.0.poc.md
CVE ID: CVE-2022-40889 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-13T14:43:40.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/qinggan/phpok/issues/13 - https://gist.github.com/T4rnRookie/e644c1dd8e025ab10fc3e3e4bfad2161
CVE ID: CVE-2022-40890 State: PUBLISHED Published: 2022-09-29T12:48:36.000Z Last Updated: 2025-05-21T14:04:54.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ToughRunner/Open5gs_bugreport
CVE ID: CVE-2022-40895 State: PUBLISHED Published: 2022-10-06T00:00:00 Last Updated: 2024-08-03T12:28:42.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated, remote attacker to affect the integrity of a device via a User Enumeration vulnerability. The vulnerability is due to insecure design, where a difference in forgot password utility could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. This affects NeDi 1.0.7 for OS X 1.0.7 <= and NeDi for Suse 1.0.7 <= and NeDi for FreeBSD 1.0.7 <=. Additional Analy
rs. This affects NeDi 1.0.7 for OS X 1.0.7 <= and NeDi for Suse 1.0.7 <= and NeDi for FreeBSD 1.0.7 <=. Additional Analyst Notes: - CVE Program Container: References: - http://forum.nedi.ch/index.php - https://www.nedi.ch/ - https://gist.github.com/UditChavda/2f2effa477a429b485ae7e2dc3bbd04f
CVE ID: CVE-2022-40896 State: PUBLISHED Published: 2023-07-19T00:00:00 Last Updated: 2024-11-27T14:28:58.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pypi.org/project/Pygments/ - https://github.com/pygments/pygments/blob/master/pygments/lexers/smithy.py#L61 - https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages-part-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZO4BQCIY2S2KZYHERQMKURB7AHXDBO
ists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZO4BQCIY2S2KZYHERQMKURB7AHXDBO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZGMXALE3HSP4OXC7UUWIKX3OXKZDTY3/
CVE ID: CVE-2022-40897 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-11-04T16:09:54.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200 - https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python