Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
loit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205836. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20eprocess.php%20SQL%20Injection/ - https://vuldb.com/?id.205836
CVE ID: CVE-2022-2724 State: PUBLISHED Published: 2022-08-09T07:10:46.000Z Last Updated: 2025-04-15T13:54:41.825Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Employee Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205837 was assigned to this vulner
ely. The exploit has been disclosed to the public and may be used. The identifier VDB-205837 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20aprocess.php%20SQL%20Injection/ - https://vuldb.com/?id.205837
CVE ID: CVE-2022-2725 State: PUBLISHED Published: 2022-08-09T07:11:00.000Z Last Updated: 2025-04-15T13:54:32.434Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Company Website CMS. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add-blog.php. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-205838 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb
s vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205838
CVE ID: CVE-2022-2726 State: PUBLISHED Published: 2022-08-09T07:11:15.000Z Last Updated: 2025-04-15T13:54:25.763Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: SEMCMS Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205839. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
this vulnerability is VDB-205839. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/G0mini/semcms/blob/main/README.md - https://vuldb.com/?id.205839
CVE ID: CVE-2022-2727 State: PUBLISHED Published: 2022-08-09T10:20:12.000Z Last Updated: 2025-04-15T13:54:19.465Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument admin_email/admin_pass leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability
remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205855. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Blythe-LU/Record2/blob/main/Gym%20Management%20System%20Project%20-%20SQL%20injection.md - https://vuldb.com/?id.205855
CVE ID: CVE-2022-2728 State: PUBLISHED Published: 2022-08-09T10:20:22.000Z Last Updated: 2025-04-15T13:54:12.031Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Gym Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /mygym/admin/index.php. The manipulation of the argument edit_tran leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205856. Additional Analys
has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205856. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Blythe-LU/Record2/blob/main/Gym%20Management%20System%20Project%20-%20SQL%20injection.md - https://vuldb.com/?id.205856
CVE ID: CVE-2022-2729 State: PUBLISHED Published: 2022-08-09T11:55:25 Last Updated: 2024-08-03T00:46:04.185Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/13b58e74-2dd0-4eec-9f3a-554485701540 - https://github.com/openemr/openemr/commit/74d21039aec641b2c406e3baf238ae4602a968b6
CVE ID: CVE-2022-2730 State: PUBLISHED Published: 2022-08-09T11:55:10 Last Updated: 2024-08-03T00:46:04.063Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a81f39ab-092b-4941-b9ca-c4c8f2191504 - https://github.com/openemr/openemr/commit/2973592bc7b1f4996738a6fd27d1e277e33676b6
CVE ID: CVE-2022-2731 State: PUBLISHED Published: 2022-08-09T12:00:19 Last Updated: 2024-08-03T00:46:04.185Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/20b8d5c5-0764-4f0b-8ab3-b9f6b857175e - https://github.com/openemr/openemr/commit/285fb234bd27ea4c46a29f2797edda7f38f1d8db
CVE ID: CVE-2022-2732 State: PUBLISHED Published: 2022-08-09T12:06:13 Last Updated: 2024-11-20T16:18:21.615Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-862 Description: Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/commit/2973592bc7b1f4996738a6fd27d1e277e33676b6 - https://huntr.dev/bounties/8773e0d1-5f1a-4e87-8998-f5ec45f6d533
CVE ID: CVE-2022-2733 State: PUBLISHED Published: 2022-08-09T12:05:11 Last Updated: 2024-08-03T00:46:04.041Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/25b91301-dfb0-4353-a732-e051bbe8420c - https://github.com/openemr/openemr/commit/59458bc15ab0cb556c521de9d5187167d6f88945
CVE ID: CVE-2022-2734 State: PUBLISHED Published: 2022-08-09T12:30:18 Last Updated: 2024-08-03T00:46:04.248Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: openemr Products: openemr/openemr Problem Types: CWE-1021 Description: Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d8e4c70c-788b-47e9-8141-a08db751d4e6 - https://github.com/openemr/openemr/commit/203243467675e85b8b479c778e44ae1aac8bad55
CVE ID: CVE-2022-2735 State: PUBLISHED Published: 2022-09-06T17:18:51 Last Updated: 2024-08-03T00:46:04.116Z Vendors: n/a Products: ClusterLabs/pcs Problem Types: CWE-276 Description: A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2116815 - https://www.openwall.com
s: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2116815 - https://www.openwall.com/lists/oss-security/2022/09/01/4 - https://access.redhat.com/security/cve/CVE-2022-2735 - https://www.debian.org/security/2022/dsa-5226
CVE ID: CVE-2022-2736 State: PUBLISHED Published: 2022-08-11T04:55:23.000Z Last Updated: 2025-04-15T13:54:03.647Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Company Website CMS. It has been classified as critical. This affects an unknown part of the file /dashboard/updatelogo.php of the component Background Upload Logo Icon. The manipulation of the argument xfile/ufile leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-205881 was assigned to this vulnerability. Additional Analyst Notes
to initiate the attack remotely. The identifier VDB-205881 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205881
CVE ID: CVE-2022-2737 State: PUBLISHED Published: 2022-09-16T08:40:33 Last Updated: 2024-08-03T00:46:04.156Z Vendors: Unknown Products: WP STAGING – Backup Duplicator & Migration Problem Types: CWE-79 Description: The WP STAGING WordPress plugin before 2.9.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/91bbdeb0-f2df-4500-b856-af0ff68fbb12
CVE ID: CVE-2022-2738 State: PUBLISHED Published: 2022-09-01T20:50:57 Last Updated: 2024-08-03T00:46:04.079Z Vendors: n/a Products: podman Problem Types: CWE-416 Description: The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code execution in Go applications that use the Go GPGME wrapper library, under certain conditions, during GPG signature verification. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?i
erification. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2116923 - https://access.redhat.com/security/cve/CVE-2022-2738
CVE ID: CVE-2022-2739 State: PUBLISHED Published: 2022-09-01T20:51:02 Last Updated: 2024-08-03T00:46:04.095Z Vendors: n/a Products: podman Problem Types: CWE-200 Description: The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive information stored in environment variables. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2116927 - https://access.redhat.com/security/cve/CVE-2022-2739
CVE ID: CVE-2022-2740 State: PUBLISHED Published: 2022-08-11T04:55:34.000Z Last Updated: 2025-04-15T13:53:56.081Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Company Website CMS. It has been declared as critical. This vulnerability affects unknown code of the file /dashboard/add-blog.php of the component Add Blog. The manipulation of the argument ufile leads to unrestricted upload. The attack can be initiated remotely. VDB-205882 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: -
tely. VDB-205882 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205882
CVE ID: CVE-2022-2741 State: PUBLISHED Published: 2022-10-31T17:45:09.741Z Last Updated: 2025-05-05T14:06:07.171Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-400 Description: The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node (this can easily be guessed based on CAN traffic analyses). The frame must contain the opposite RTR bit as what the filter installed in the vulnerable node contains (if the filter matches RTR frames, the frame must be a
bit as what the filter installed in the vulnerable node contains (if the filter matches RTR frames, the frame must be a data frame or vice versa). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx5v-j59q-c3j8
CVE ID: CVE-2022-2742 State: PUBLISHED Published: 2023-01-02T00:00:00 Last Updated: 2024-10-22T16:19:18.532Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. (Chrome security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1319172
CVE ID: CVE-2022-2743 State: PUBLISHED Published: 2023-01-02T00:00:00 Last Updated: 2024-10-22T15:39:29.454Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions. (Chrome security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html - https://crbug.com/1316960
CVE ID: CVE-2022-2744 State: PUBLISHED Published: 2022-08-11T04:55:47.000Z Last Updated: 2025-04-15T13:53:49.213Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality of the file /admin/add_exercises.php of the component Background Management. The manipulation of the argument exer_img leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206012. Additional Analyst Note
upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206012. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206012
CVE ID: CVE-2022-2745 State: PUBLISHED Published: 2022-08-11T04:55:59.000Z Last Updated: 2025-04-15T13:53:40.717Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file /admin/add_trainers.php of the component Add New Trainer. The manipulation of the argument trainer_name leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-206013 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program C
attack remotely. The identifier VDB-206013 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206013
CVE ID: CVE-2022-2746 State: PUBLISHED Published: 2022-08-11T04:56:13.000Z Last Updated: 2025-04-15T13:53:33.498Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple Online Book Store System Problem Types: CWE-434 Description: A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin_ add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206014
CVE ID: CVE-2022-2747 State: PUBLISHED Published: 2022-08-11T04:56:26.000Z Last Updated: 2025-04-15T13:53:24.884Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple Online Book Store Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument book_isbn leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-206015. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
s vulnerability is VDB-206015. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206015
CVE ID: CVE-2022-2748 State: PUBLISHED Published: 2022-08-11T04:56:40.000Z Last Updated: 2025-04-15T13:53:16.893Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple Online Book Store System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-206016. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
identifier of this vulnerability is VDB-206016. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206016
CVE ID: CVE-2022-2749 State: PUBLISHED Published: 2022-08-11T04:56:50.000Z Last Updated: 2025-04-15T13:53:09.820Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/index.php?view_exercises. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206017 was assigned to this vulnerability. Ad
ploit has been disclosed to the public and may be used. The identifier VDB-206017 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Blythe-LU/Record3/blob/main/Gym%20Management%20System%20Project-%20Arbitrary%20file%20upload%20vulnerability.md - https://vuldb.com/?id.206017
CVE ID: CVE-2022-2750 State: PUBLISHED Published: 2022-08-11T04:57:07.000Z Last Updated: 2025-04-15T13:53:01.736Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in SourceCodester Company Website CMS. Affected is an unknown function of the file /dashboard/add-service.php of the component Add Service Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-206022 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA AD
DB-206022 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206022
CVE ID: CVE-2022-2751 State: PUBLISHED Published: 2022-08-11T04:57:23.000Z Last Updated: 2025-04-15T13:52:52.371Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/add-portfolio.php. The manipulation of the argument ufile leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206024. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
fier of this vulnerability is VDB-206024. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.206024
CVE ID: CVE-2022-2752 State: PUBLISHED Published: 2022-12-09T13:30:26.346Z Last Updated: 2025-04-22T19:44:33.832Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: Secomea Products: GateManager Problem Types: CWE-287 Description: A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.secomea.com/support/cybersecurity-advisory