Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-40191 State: PUBLISHED Published: 2022-09-09T14:39:53.440Z Last Updated: 2025-02-20T20:07:43.152Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Ali Khallad Products: Contact Form By Mega Forms (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Ali Khallad's Contact Form By Mega Forms plugin <= 1.2.4 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mega-forms/wordpress-contact-form-by-mega-forms-plugin-1-2-4-authenticated-stored-cross-site-scripting-xss-vulnera
ility/mega-forms/wordpress-contact-form-by-mega-forms-plugin-1-2-4-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/mega-forms/#developers
CVE ID: CVE-2022-40192 State: PUBLISHED Published: 2022-11-17T22:14:27.412Z Last Updated: 2025-02-20T19:53:34.137Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: gVectors Team Products: wpForo Forum (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-40193 State: PUBLISHED Published: 2022-09-23T14:30:01.013Z Last Updated: 2025-02-20T20:03:07.873Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: BriniA Products: Awesome Filterable Portfolio (WordPress plugin) Problem Types: CWE-79 Description: Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/awesome-filterable-portfolio/ - https://patchstack.com/database/vulnerability/awesome-filterable-portfolio/wordpress-awesome-filterable-portfolio-plugin-1-9-
://patchstack.com/database/vulnerability/awesome-filterable-portfolio/wordpress-awesome-filterable-portfolio-plugin-1-9-7-unauthenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve
CVE ID: CVE-2022-40194 State: PUBLISHED Published: 2022-09-23T15:05:35.492Z Last Updated: 2025-02-20T20:02:14.666Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: CusRev Products: Customer Reviews for WooCommerce (WordPress plugin) Problem Types: CWE-200 Description: Unauthenticated Sensitive Information Disclosure vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/customer-reviews-woocommerce/wordpress-customer-reviews-for-woocommerce-plugin-5-3-5-sensitive-information-disclosure-vulnerability/_s
ws-woocommerce/wordpress-customer-reviews-for-woocommerce-plugin-5-3-5-sensitive-information-disclosure-vulnerability/_s_id=cve - https://wordpress.org/plugins/customer-reviews-woocommerce/#developers
CVE ID: CVE-2022-40195 State: PUBLISHED Published: 2022-09-23T14:36:58.269Z Last Updated: 2025-02-20T20:02:36.233Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: PCA Predict Products: PCA Predict (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PCA Predict plugin <= 1.0.3 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/address-email-and-phone-validation/wordpress-pca-predict-plugin-1-0-3-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org
s-pca-predict-plugin-1-0-3-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/address-email-and-phone-validation/
CVE ID: CVE-2022-40196 State: PUBLISHED Published: 2023-02-06T18:58:00.801Z Last Updated: 2025-01-27T18:26:30.603Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI DPC++/C++ Compiler and IntelÂ® C++ Compiler Classic for some Intel(R) oneAPI Toolkits Problem Types: escalation of privilege Description: Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Progra
uthenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00773.html
CVE ID: CVE-2022-40198 State: PUBLISHED Published: 2023-03-01T13:11:00.991Z Last Updated: 2025-01-13T15:54:59.169Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: StandaloneTech Products: TeraWallet – For WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in StandaloneTech TeraWallet – For WooCommerce plugin <= 1.3.24 leading to plugin settings change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-wallet/wordpress-terawallet-for-woocommerce-plugin-1-3-24-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2022-40199 State: PUBLISHED Published: 2022-09-27T01:55:17.000Z Last Updated: 2025-05-21T18:23:18.170Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE 3 series and EC-CUBE 4 series Problem Types: Directory traversal Description: Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ec-cube.net/info/weakness/20220909/ - https://jvn.jp/en/jp/JVN21213852/index.html
CVE ID: CVE-2022-40200 State: PUBLISHED Published: 2022-11-17T22:00:59.930Z Last Updated: 2025-02-20T19:54:09.060Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: gVectors Team Products: wpForo Forum (WordPress plugin) Problem Types: Arbitrary File Upload Description: Auth. (subscriber+) Arbitrary File Upload vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wpforo/#developers - https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2022-40201 State: PUBLISHED Published: 2023-01-06T21:10:43.968Z Last Updated: 2025-02-13T16:33:01.388Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Systems Products: MicroStation Connect Problem Types: CWE-121 Description: Bentley Systems MicroStation Connect versions 10.17.0.209 and prior are vulnerable to a Stack-Based Buffer Overflow when a malformed design (DGN) file is parsed. This may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-293-01 - https://www.bentley.com/advisories/be-2023-0003/
CVE ID: CVE-2022-40202 State: PUBLISHED Published: 2022-10-31T19:35:08.629Z Last Updated: 2025-04-16T16:06:43.696Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-306 Description: The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized objects which, when deserialized, could activate an opcode for a backup scheduling function without authentication. This function allows the user to designate all function arguments and the file to be executed. This could allow the
on. This function allows the user to designate all function arguments and the file to be executed. This could allow the attacker to start any new process and achieve remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE ID: CVE-2022-40203 State: PUBLISHED Published: 2024-01-17T16:08:58.285Z Last Updated: 2025-06-17T21:19:16.832Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: AlgolPlus Products: Advanced Dynamic Pricing for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce.This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through 4.1.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-dynamic-pricing-for-woocommerce/wordpress-advanced-dynamic-pricing-for-woocommerce-plu
m/database/vulnerability/advanced-dynamic-pricing-for-woocommerce/wordpress-advanced-dynamic-pricing-for-woocommerce-plugin-4-1-5-broken-access-control?_s_id=cve
CVE ID: CVE-2022-40204 State: PUBLISHED Published: 2022-11-30T23:07:29.206Z Last Updated: 2025-04-16T16:05:41.671Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Digital Alert Systems Products: DASDEC Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.digitalalertsystems.com/security-advisory
CVE ID: CVE-2022-40205 State: PUBLISHED Published: 2022-11-08T18:26:58.931Z Last Updated: 2025-02-20T19:55:35.377Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: gVectors Team Products: wpForo Forum (WordPress plugin) Problem Types: Insecure Direct Object References (IDOR) Description: Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as solved/unsolved. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wpforo/ - https://patchstack.com/database/vulnerability/w
ADP Vulnrichment: References: - https://wordpress.org/plugins/wpforo/ - https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-insecure-direct-object-references-idor-vulnerability-2?_s_id=cve
CVE ID: CVE-2022-40206 State: PUBLISHED Published: 2022-11-08T18:31:21.259Z Last Updated: 2025-02-20T19:55:14.384Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: gVectors Team Products: wpForo Forum (WordPress plugin) Problem Types: Insecure Direct Object References (IDOR) Description: Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles to mark any forum post as private/public. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wpforo/ - https://patchstack.com/database/vulnerability/wp
ADP Vulnrichment: References: - https://wordpress.org/plugins/wpforo/ - https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2022-40207 State: PUBLISHED Published: 2023-05-10T13:17:10.285Z Last Updated: 2025-01-27T18:01:31.992Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) SUR software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00785.html
CVE ID: CVE-2022-40208 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-20T18:56:04.388Z Vendors: n/a Products: Moodle Problem Types: CWE-285 Description: In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz attempt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://moodle.org/mod/forum/discuss.php?d=438761
CVE ID: CVE-2022-40209 State: PUBLISHED Published: 2022-12-06T14:54:09.009Z Last Updated: 2024-08-03T12:14:39.814Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Xylus Themes Products: WP Smart Import Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-smart-import/wordpress-importer-plugin-1-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2022-40210 State: PUBLISHED Published: 2023-05-10T13:17:09.262Z Last Updated: 2025-01-27T18:01:53.703Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: n/a Products: Intel DCM software Problem Types: escalation of privilege, CWE-488 Description: Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00772.html
CVE ID: CVE-2022-40211 State: PUBLISHED Published: 2024-04-12T13:09:39.686Z Last Updated: 2024-08-03T12:14:39.960Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: GiveWP Products: GiveWP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP allows Stored XSS.This issue affects GiveWP: from n/a through 2.25.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/give/wordpress-givewp-plugin-2-25-1-cross-site-scripting-xss-via-render-dropdown-vulnerability?_s_id=cve
CVE ID: CVE-2022-40213 State: PUBLISHED Published: 2022-09-23T13:50:57.633Z Last Updated: 2025-02-20T20:04:07.605Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: GS Plugins Products: GS Testimonial Slider (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in GS Testimonial Slider plugin <= 1.9.6 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/gs-testimonial/#developers - https://patchstack.com/database/vulnerability/gs-testimonial/wordpress-gs-testimonial-slider-plugin-1-9-6-multiple
ers - https://patchstack.com/database/vulnerability/gs-testimonial/wordpress-gs-testimonial-slider-plugin-1-9-6-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities/_s_id=cve
CVE ID: CVE-2022-40214 State: REJECTED Published: N/A Last Updated: 2023-08-31T18:34:14.660Z Description: No description available.
CVE ID: CVE-2022-40215 State: PUBLISHED Published: 2022-09-23T15:22:05.633Z Last Updated: 2025-02-20T20:01:12.659Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: Biplob Adhikari Products: Tabs (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in Tabs plugin <= 3.7.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/vc-tabs/wordpress-tabs-plugin-3-7-1-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities/_s_id=cve - https://wordpress.org/plugins/vc-tabs/
CVE ID: CVE-2022-40216 State: PUBLISHED Published: 2022-11-18T22:33:03.687Z Last Updated: 2025-02-20T19:49:49.960Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: WordPlus Products: Better Messages (WordPress plugin) Problem Types: Bypass Description: Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin <= 1.9.10.69 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/bp-better-messages/#developers - https://patchstack.com/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-69-messaging-block-bypass-vulnerability?_s_id=
/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-69-messaging-block-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2022-40217 State: PUBLISHED Published: 2022-09-21T19:09:08.151Z Last Updated: 2025-02-20T20:04:52.759Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: XplodedThemes Products: WPIDE – File Manager & Code Editor (WordPress plugin) Problem Types: Arbitrary File Upload, Arbitrary File Edit Description: Authenticated (admin+) Arbitrary File Edit/Upload vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wpide/#developers - https://patchstack.com/database/vulnerability/wpide/wordpress-wpide-plugin-2-6-authenticated-arbitr
/wpide/#developers - https://patchstack.com/database/vulnerability/wpide/wordpress-wpide-plugin-2-6-authenticated-arbitrary-file-edit-upload-vulnerability
CVE ID: CVE-2022-40218 State: PUBLISHED Published: 2024-05-08T11:57:45.472Z Last Updated: 2024-08-03T12:14:39.960Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: ThemeHunk Products: Advance WordPress Search Plugin Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/th-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-change-vulnerab
-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2022-40219 State: PUBLISHED Published: 2022-09-21T19:00:57.997Z Last Updated: 2025-02-20T20:05:40.471Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: SedLex Products: FavIcon Switcher (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/favicon-switcher/wordpress-favicon-switcher-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/favico
ress-favicon-switcher-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/favicon-switcher/
CVE ID: CVE-2022-40220 State: PUBLISHED Published: 2023-01-26T21:24:47.750Z Last Updated: 2025-03-28T19:22:24.288Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1612
CVE ID: CVE-2022-40221 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:46.764Z Description: No description available.
CVE ID: CVE-2022-40222 State: PUBLISHED Published: 2023-01-26T21:24:35.946Z Last Updated: 2025-04-01T14:42:30.889Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Siretta Products: QUARTZ-GOLD Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-163
ram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1638
CVE ID: CVE-2022-40223 State: PUBLISHED Published: 2022-11-08T18:20:24.908Z Last Updated: 2025-02-20T19:55:49.806Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SearchWP, LLC Products: SearchWP Problem Types: CWE-862 Description: Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/searchwp/wordpress-searchwp-premium-plugin-4-2-5-broken-authentication-vulnerability?_s_id=cve - https://searchwp.com/documentation/changelog/
CVE ID: CVE-2022-40224 State: PUBLISHED Published: 2023-02-07T16:52:03.607Z Last Updated: 2025-03-05T19:27:11.797Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Moxa Products: SDS-3008 Series Industrial Ethernet Switch Problem Types: CWE-410 Description: A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1618 - https://www.moxa.com/en/support/product-support/security-advisory/sds-3008-series-multiple-web-vulnerabilities
CVE ID: CVE-2022-40225 State: PUBLISHED Published: 2024-06-11T14:19:40.068Z Last Updated: 2024-08-03T12:14:39.855Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIPLUS TIM 1531 IRC, TIM 1531 IRC Problem Types: CWE-681 Description: A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices. Additional Analyst Notes: - CISA ADP Vulnrichment: - C