Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-34599 State: PUBLISHED Published: 2022-07-20T13:41:13 Last Updated: 2024-08-03T09:15:15.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/1
CVE ID: CVE-2022-34600 State: PUBLISHED Published: 2022-07-20T13:41:14 Last Updated: 2024-08-03T09:15:15.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/3
CVE ID: CVE-2022-34601 State: PUBLISHED Published: 2022-07-20T13:41:15 Last Updated: 2024-08-03T09:15:15.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/2
CVE ID: CVE-2022-34602 State: PUBLISHED Published: 2022-07-20T13:41:16 Last Updated: 2024-08-03T09:15:15.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/4
CVE ID: CVE-2022-34603 State: PUBLISHED Published: 2022-07-20T13:41:16 Last Updated: 2024-08-03T09:15:15.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/5
CVE ID: CVE-2022-34604 State: PUBLISHED Published: 2022-07-20T13:41:17 Last Updated: 2024-08-03T09:15:15.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/11
CVE ID: CVE-2022-34605 State: PUBLISHED Published: 2022-07-20T13:41:18 Last Updated: 2024-08-03T09:15:15.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/10
CVE ID: CVE-2022-34606 State: PUBLISHED Published: 2022-07-20T13:41:18 Last Updated: 2024-08-03T09:15:15.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/6
CVE ID: CVE-2022-34607 State: PUBLISHED Published: 2022-07-20T13:41:19 Last Updated: 2024-08-03T09:15:15.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/8
CVE ID: CVE-2022-34608 State: PUBLISHED Published: 2022-07-20T13:41:19 Last Updated: 2024-08-03T09:15:15.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/7
CVE ID: CVE-2022-34609 State: PUBLISHED Published: 2022-07-20T13:41:20 Last Updated: 2024-08-03T09:15:15.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/9
CVE ID: CVE-2022-34610 State: PUBLISHED Published: 2022-07-20T13:41:21 Last Updated: 2024-08-03T09:15:15.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/H3C/12
CVE ID: CVE-2022-34611 State: PUBLISHED Published: 2022-07-27T01:35:15 Last Updated: 2024-08-03T09:15:15.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac #" text field. Additional Analyst Notes: - CVE Program Container: References: - http://online.com - https://www.sourcecodester.com/ - https://github.com/As4ki/CVE-report/blob/main/OFRS.md
CVE ID: CVE-2022-34612 State: PUBLISHED Published: 2022-07-27T00:00:00 Last Updated: 2024-08-03T09:15:15.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rizinorg/rizin/issues/2738 - https://github.com/rizinorg/rizin/pull/2739 - https://security.gentoo.org/glsa/202209-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQZLMHEI5D7EJASA5UW6XN4ODHLRHK6N
ists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQZLMHEI5D7EJASA5UW6XN4ODHLRHK6N/
CVE ID: CVE-2022-34613 State: PUBLISHED Published: 2022-08-02T15:00:40 Last Updated: 2024-08-03T09:15:15.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mealie 1.0.0beta3 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/79.html - https://hub.docker.com/r/hkotel/mealie - https://docs.mealie.io/changelog/v0.5.6/ - https://gainsec.com/2022/08/02/cve-2022-34613-cve-2022-34618-cve-2022-34619-xss-file-upload-and-more/
CVE ID: CVE-2022-34615 State: PUBLISHED Published: 2022-08-19T13:21:01 Last Updated: 2024-08-03T09:15:15.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://hub.docker.com/r/hkotel/mealie - https://docs.mealie.io/changelog/v0.5.6/ - https://cwe.mitre.org/data/definitions/521.html - https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
CVE ID: CVE-2022-34618 State: PUBLISHED Published: 2022-08-02T15:00:28 Last Updated: 2024-08-03T09:15:15.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Mealie 1.0.0beta3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the recipe description text field. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/79.html - https://hub.docker.com/r/hkotel/mealie - https://docs.mealie.io/changelog/v0.5.6/ - https://gainsec.com/2022/08/02/cve-2022-34613-cve-2022-34618-cve-2022-34619-xss-file-upload-and-more/ - https://huntr.dev/bounties/aa
ec.com/2022/08/02/cve-2022-34613-cve-2022-34618-cve-2022-34619-xss-file-upload-and-more/ - https://huntr.dev/bounties/aa610613-6ebb-4544-9aa6-046dc28fe4ff/
CVE ID: CVE-2022-34619 State: PUBLISHED Published: 2022-08-02T21:50:37 Last Updated: 2024-08-03T09:15:15.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Mealie v0.5.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Shopping Lists item names text field. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/79.html - https://hub.docker.com/r/hkotel/mealie - https://docs.mealie.io/changelog/v0.5.6/ - https://gainsec.com/2022/08/02/cve-2022-34613-cve-2022-34618-cve-2022-34619-xss-file-upload-and-more/ - https://huntr.dev/bounties
insec.com/2022/08/02/cve-2022-34613-cve-2022-34618-cve-2022-34619-xss-file-upload-and-more/ - https://huntr.dev/bounties/aa610613-6ebb-4544-9aa6-046dc28fe4ff/
CVE ID: CVE-2022-34621 State: PUBLISHED Published: 2022-08-19T13:21:24 Last Updated: 2024-08-03T09:15:15.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/web-security/access-control/idor - https://cwe.mitre.org/data/definitions/639.html - https://hub.docker.com/r/hkotel/mealie - https://docs.mealie.io/changelog/v0.5.6/ - https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621
/hkotel/mealie - https://docs.mealie.io/changelog/v0.5.6/ - https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
CVE ID: CVE-2022-34623 State: REJECTED Published: N/A Last Updated: 2024-05-07T17:52:43.558705 Description: No description available.
CVE ID: CVE-2022-34624 State: PUBLISHED Published: 2022-08-19T13:22:03 Last Updated: 2024-08-03T09:15:15.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mealie1.0.0beta3 does not terminate download tokens after a user logs out, allowing attackers to perform a man-in-the-middle attack via a crafted GET request. Additional Analyst Notes: - CVE Program Container: References: - http://hkotel.com - http://mealie.com - https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
CVE ID: CVE-2022-34625 State: PUBLISHED Published: 2022-08-02T15:16:16 Last Updated: 2024-08-03T09:15:15.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to execute arbitrary code via a crafted Jinja2 template. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/94.html - https://hub.docker.com/r/hkotel/mealie - https://docs.mealie.io/changelog/v0.5.6/ - https://cwe.mitre.org/data/definitions/1336.html - https://gainsec.com/2022/08/02/cve-2022-34625-ssti-rce-mealie/
CVE ID: CVE-2022-34632 State: PUBLISHED Published: 2022-07-18T22:45:42 Last Updated: 2024-08-03T09:15:15.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chipsalliance/rocket-chip/pull/2950#issuecomment-1106745660 - https://github.com/chipsalliance/rocket-chip/pull/2950#issuecomment-1107055607 - https://github.com/chipsalliance/rocket-chip/pull/2950/commits/4f8114374d8824dfdec03f576a8cd68bebce4e56
CVE ID: CVE-2022-34633 State: PUBLISHED Published: 2022-07-18T22:45:43 Last Updated: 2024-08-03T09:15:15.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions rather create an exception. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhwgroup/cva6/issues/876 - https://github.com/openhwgroup/cva6/pull/921
CVE ID: CVE-2022-34634 State: PUBLISHED Published: 2022-07-18T22:45:44 Last Updated: 2024-08-03T09:15:15.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather create an exception. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhwgroup/cva6/issues/899 - https://github.com/openhwgroup/cva6/pull/922
CVE ID: CVE-2022-34635 State: PUBLISHED Published: 2022-07-18T22:45:45 Last Updated: 2024-08-03T09:15:15.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field is set to Dirty. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhwgroup/cva6/issues/917
CVE ID: CVE-2022-34636 State: PUBLISHED Published: 2022-07-18T22:45:45 Last Updated: 2024-08-03T09:15:15.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/riscv-boom/riscv-boom/issues/606 - https://github.com/openhwgroup/cva6/issues/905
CVE ID: CVE-2022-34637 State: PUBLISHED Published: 2022-07-18T22:45:46 Last Updated: 2024-08-03T09:15:15.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual address is loaded. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhwgroup/cva6/issues/904
CVE ID: CVE-2022-34639 State: PUBLISHED Published: 2022-07-18T22:45:48 Last Updated: 2024-08-03T09:15:15.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect the function of the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhwgroup/cva6/issues/900 - https://github.com/openhwgroup/cva6/pull/923
CVE ID: CVE-2022-34640 State: PUBLISHED Published: 2022-07-18T22:45:50 Last Updated: 2024-08-03T09:15:15.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openhwgroup/cva6/issues/898
CVE ID: CVE-2022-34641 State: PUBLISHED Published: 2022-07-18T22:45:51 Last Updated: 2024-08-03T09:15:15.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/riscv-boom/riscv-boom/issues/605 - https://github.com/openhwgroup/cva6/issues/906 - https://github.com/openhwgroup/cva6/pull/908
CVE ID: CVE-2022-34642 State: PUBLISHED Published: 2022-07-18T22:45:52 Last Updated: 2024-08-03T09:15:15.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/riscv-software-src/riscv-isa-sim/issues/1032
CVE ID: CVE-2022-34643 State: PUBLISHED Published: 2022-07-18T22:45:54 Last Updated: 2024-08-03T09:15:15.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/riscv-software-src/riscv-isa-sim/issues/971
CVE ID: CVE-2022-34648 State: PUBLISHED Published: 2022-08-23T15:45:25.405Z Last Updated: 2025-02-20T20:12:25.369Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: dmitrylitvinov Products: Uploading SVG, WEBP and ICO files (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/uploading-svgwebp-and-ico-files/wordpress-uploading-svg-webp-and-ico-files-plugin-1-0-0-authenticate
abase/vulnerability/uploading-svgwebp-and-ico-files/wordpress-uploading-svg-webp-and-ico-files-plugin-1-0-0-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/uploading-svgwebp-and-ico-files/#developers
CVE ID: CVE-2022-34649 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:00.438Z Description: No description available.
CVE ID: CVE-2022-34650 State: PUBLISHED Published: 2022-07-22T16:51:41.048Z Last Updated: 2025-02-20T20:15:35.342Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: wpWax Products: Team (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in wpWax Team plugin <= 1.2.6 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/adl-team/#description - https://patchstack.com/database/vulnerability/adl-team/wordpress-team-plugin-1-2-6-multiple-stored-cross-site-scripting-xss-vulnerabi
stack.com/database/vulnerability/adl-team/wordpress-team-plugin-1-2-6-multiple-stored-cross-site-scripting-xss-vulnerabilities
CVE ID: CVE-2022-34651 State: PUBLISHED Published: 2022-08-04T17:47:17.368453Z Last Updated: 2024-09-16T18:43:57.619Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-476 Description: In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS 1.3 enabled is configured on a virtual server, along with an iRule that calls HTTP::respond, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: Re
ch have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K59197053
CVE ID: CVE-2022-34652 State: PUBLISHED Published: 2022-08-22T18:30:26.991Z Last Updated: 2025-04-15T18:49:30.373Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-89 Description: A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules plugin, allowing an attacker to inject SQL by manipulating the description parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
inject SQL by manipulating the description parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1551
CVE ID: CVE-2022-34653 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:01.718Z Description: No description available.
CVE ID: CVE-2022-34654 State: PUBLISHED Published: 2022-11-28T19:30:09.979Z Last Updated: 2025-02-20T19:49:04.972Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Virgial Berveling Products: Manage Notification E-mails (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in Virgial Berveling's Manage Notification E-mails plugin <= 1.8.2 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/manage-notification-emails/wordpress-manage-notification-e-mails-plugin-1-8-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-34655 State: PUBLISHED Published: 2022-08-04T17:47:31.214983Z Last Updated: 2024-09-16T23:10:45.137Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-457 Description: In BIG-IP Versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an iRule containing the HTTP::payload command is configured on a virtual server, undisclosed traffic can cause Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/
t (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K93504311
CVE ID: CVE-2022-34656 State: PUBLISHED Published: 2022-09-06T17:18:54.693Z Last Updated: 2025-02-20T20:09:06.576Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: wpdevart Products: Poll, Survey, Questionnaire and Voting system (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin+) Cross-Site Scripting (XSS) vulnerability in wpdevart Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/polls-widget/wordpress-poll-survey-questionnaire-and-voting-system-plugin-1-7-4-authenticated-cr
/database/vulnerability/polls-widget/wordpress-poll-survey-questionnaire-and-voting-system-plugin-1-7-4-authenticated-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/polls-widget/
CVE ID: CVE-2022-34657 State: PUBLISHED Published: 2023-08-11T02:36:52.308Z Last Updated: 2024-10-02T14:13:31.614Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) PCSD BIOS Problem Types: information disclosure, CWE-20 Description: Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00742.html
CVE ID: CVE-2022-34658 State: PUBLISHED Published: 2022-08-23T15:46:33.953Z Last Updated: 2025-02-20T20:11:47.747Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: W3 Eden, Inc. Products: Download Manager (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/download-manager/#developers - https://patchstack.com/database/vulnerability/download-manager/wordpress-download-manager-plugin-3-2-48-mu